Sample viewer

vx.netlux.org/Virus.DOS.Marawi.2828

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:16:10.824733223Z 48 PC: 13998 | Get DOS version
2018-12-17T23:16:10.826963939Z 53 PC: 12c3a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:16:10.828213695Z 37 PC: 12c4c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:16:10.829628493Z 53 PC: 12c51 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T23:16:10.831175845Z 37 PC: 12c63 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T23:16:10.832923181Z 49 PC: 12cb2 | Terminate and stay resident (Return code = '0' | Memory size = '193')
2018-12-17T23:16:10.834388832Z 75 PC: 12d08 | Execute program
2018-12-17T23:16:10.844375362Z 48 PC: 12d38 | Get DOS version
2018-12-17T23:16:10.846369415Z 76 PC: 136b5 | Terminate with return code (Return code = '0')