Sample viewer

vx.netlux.org/Virus.DOS.Chapa.450.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:08:44.865727677Z 53 PC: 12b76 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:08:44.867919493Z 37 PC: 12b98 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:08:44.869075764Z 53 PC: 12b9d | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:08:44.870190637Z 37 PC: 12bad | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:08:44.872405866Z 48 PC: 12a63 | Get DOS version
2018-12-17T23:08:44.873580044Z 9 PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ')
2018-12-17T23:08:44.8827096Z 61 PC: 12cb7 | Open file (Filename = '')
2018-12-17T23:08:44.890047111Z 9 PC: 12a88 | Display string (String= 'Self test: ')
2018-12-17T23:08:44.892598407Z 93 PC: 12b24 | File sharing functions
2018-12-17T23:08:44.89435252Z 9 PC: 12b03 | Display string (String= 'Size change=+01C2h/00450d. Virus might be activ? ')
2018-12-17T23:08:44.89954901Z 76 PC: 12b09 | Terminate with return code (Return code = '1')