Sample viewer

vx.netlux.org/Virus.DOS.Qark.2000.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:04.768500177Z 118 PC: 12e93 | UNKNOWN!
2018-12-17T23:09:04.770088562Z 72 PC: 12f08 | Allocate memory
2018-12-17T23:09:04.772511566Z 74 PC: 12eae | Reallocate memory
2018-12-17T23:09:04.774424401Z 72 PC: 12f08 | Allocate memory
2018-12-17T23:09:04.77656239Z 53 PC: 12edb | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T23:09:04.780022923Z 53 PC: 12ee7 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:04.781981995Z 37 PC: 12ef7 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T23:09:04.783833134Z 37 PC: 12efe | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:04.786245638Z 9 PC: 12ad3 | Display string (String= ' Mabuhay! This program came from Bahay Kawayan at http://come.to/hexfiles Putoksa Kawayan [email protected] ')
2018-12-17T23:09:04.801195537Z 76 PC: 12ad7 | Terminate with return code (Return code = '36')