Sample viewer

vx.netlux.org/Virus.DOS.I13.Merc.869

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:39.254792098Z 205 PC: 12a4d | UNKNOWN!
2018-12-17T23:09:39.256036387Z 53 PC: 12a58 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:39.256935798Z 74 PC: 12a75 | Reallocate memory
2018-12-17T23:09:39.258193507Z 72 PC: 12a7c | Allocate memory
2018-12-17T23:09:39.260128681Z 37 PC: 12aa1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:09:39.261213605Z 2 PC: 12dab | Character output (Char = '07')
2018-12-17T23:09:39.263353013Z 76 PC: 12db0 | Terminate with return code (Return code = '0')
2018-12-17T23:09:39.266818277Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:09:39.26812757Z 72 PC: 12174 | Allocate memory
2018-12-17T23:09:39.270086488Z 72 PC: 1218d | Allocate memory
2018-12-17T23:09:39.272378254Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:09:39.273686407Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:39.274856398Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.276111746Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.277609744Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.279142909Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.280080376Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.281709945Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.282964601Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.284601455Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.28699596Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.28852754Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.28971708Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.292063866Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.293045054Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.294448678Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.296516037Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.298140568Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.29927603Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.301172464Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.302363952Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.303844667Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.305795058Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.307199264Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.30819461Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.309549085Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.310955196Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.312733339Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.314172257Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.316458397Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.317825937Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.319571401Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.321631613Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.323405579Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.324742974Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.327367151Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.328537001Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.330028038Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.331735936Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.333469418Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.335611458Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.341476692Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.342793792Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.344513Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.346554541Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.348299327Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.349613848Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.35219373Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.353280383Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.354701047Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.356296499Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.357671924Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.358768075Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.360687755Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.362015445Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.363656387Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.365621873Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.367543923Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.368797725Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.370619037Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.372631517Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.374284937Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:39.375534945Z 62 PC: 122ab | Close file
2018-12-17T23:09:39.379253979Z 99 PC: 9a257 | Get DBCS lead byte table pointer
2018-12-17T23:09:39.380668302Z 56 PC: 94a79 | Get or set country info
2018-12-17T23:09:39.382657899Z 64 PC: 9a4c8 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:09:39.387570527Z 25 PC: 94ae2 | Get default drive
2018-12-17T23:09:39.389280549Z 71 PC: 96d5d | Get current directory
2018-12-17T23:09:39.393157873Z 64 PC: 9a4c8 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:09:39.396900325Z 2 PC: 96d32 | Character output (Char = '3e')
2018-12-17T23:09:39.399166969Z 93 PC: 94ba0 | File sharing functions
2018-12-17T23:09:39.400926363Z 93 PC: 94ba7 | File sharing functions
2018-12-17T23:09:39.405751619Z 10 PC: 94bb9 | Buffered keyboard input
2018-12-17T23:09:54.257981049Z 0 PC: 0 | Program terminate
2018-12-17T23:09:55.612099963Z 0 PC: 0 | Program terminate
2018-12-17T23:09:55.714249618Z 64 PC: 9a4c8 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:09:55.720047402Z 41 PC: 94c2e | Parse filename
2018-12-17T23:09:55.723291269Z 41 PC: 94caf | Parse filename
2018-12-17T23:09:55.725059363Z 41 PC: 94ccc | Parse filename
2018-12-17T23:09:55.728478121Z 26 PC: 98177 | Set disk transfer address
2018-12-17T23:09:55.731448705Z 71 PC: 98373 | Get current directory
2018-12-17T23:09:55.739657687Z 78 PC: 9837e | Find first file
2018-12-17T23:09:55.748823966Z 71 PC: 981ec | Get current directory
2018-12-17T23:09:55.752350918Z 73 PC: 97889 | Release memory
2018-12-17T23:09:55.753949463Z 75 PC: 11821 | Execute program
2018-12-17T23:09:55.768242911Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T23:09:55.772907929Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-17T23:09:55.776205575Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:09:55.777680407Z 72 PC: 12174 | Allocate memory
2018-12-17T23:09:55.780754749Z 72 PC: 1218d | Allocate memory
2018-12-17T23:09:55.78269719Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:09:55.784132839Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:09:55.786385617Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.788201441Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.789625294Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.79215418Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.794906311Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.796746174Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.798714621Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.800764931Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.802128077Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.803932008Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.806057297Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.807721179Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.809408535Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.810733094Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.81198448Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.814491148Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.816452344Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.818226343Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.819734825Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.821471886Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.822798683Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.824313788Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.825797613Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.827190475Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.828293356Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.829998045Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.831266046Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.833048231Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.835136335Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.836844775Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.837880578Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.8397504Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.840786252Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.842271981Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.844335597Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.846114087Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.847174305Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.849113505Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.850113078Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.851673475Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.853265112Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.854847993Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.855813432Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.857933418Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.858885007Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.860519838Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.862724508Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.864395251Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.86570156Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.868572994Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.869919759Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.871617673Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.873924235Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.875632547Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.876964144Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.879835909Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.881243749Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.882915511Z 53 PC: 9fbb0 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.884626951Z 37 PC: 9fbc4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.887053096Z 37 PC: 9fba0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:09:55.888922636Z 62 PC: 122ab | Close file
2018-12-17T23:09:55.893620021Z 99 PC: 9a257 | Get DBCS lead byte table pointer
2018-12-17T23:09:55.895297687Z 56 PC: 94a79 | Get or set country info
2018-12-17T23:09:55.897460754Z 64 PC: 9a4c8 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:09:55.903048492Z 25 PC: 94ae2 | Get default drive
2018-12-17T23:09:55.906445064Z 71 PC: 96d5d | Get current directory
2018-12-17T23:09:55.912332835Z 64 PC: 9a4c8 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:09:55.916924211Z 2 PC: 96d32 | Character output (Char = '3e')
2018-12-17T23:09:55.919877349Z 93 PC: 94ba0 | File sharing functions
2018-12-17T23:09:55.921535764Z 93 PC: 94ba7 | File sharing functions
2018-12-17T23:09:55.925275614Z 10 PC: 94bb9 | Buffered keyboard input