Sample viewer

vx.netlux.org/Virus.DOS.7son.284.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:05:16.667904063Z 51 PC: 12b5b | Get or set Ctrl-Break
2018-12-17T22:05:16.66918381Z 51 PC: 12b61 | Get or set Ctrl-Break
2018-12-17T22:05:16.669898549Z 53 PC: 12b66 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.670917845Z 37 PC: 12b71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.67278527Z 37 PC: 12b73 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.673797688Z 26 PC: 12b7c | Set disk transfer address
2018-12-17T22:05:16.674813637Z 78 PC: 12ba2 | Find first file
2018-12-17T22:05:16.678809098Z 26 PC: 12c15 | Set disk transfer address
2018-12-17T22:05:16.679907301Z 37 PC: 12c1a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.680967281Z 51 PC: 12c1e | Get or set Ctrl-Break
2018-12-17T22:05:16.681749628Z 51 PC: 12b5b | Get or set Ctrl-Break
2018-12-17T22:05:16.682908503Z 51 PC: 12b61 | Get or set Ctrl-Break
2018-12-17T22:05:16.68373622Z 53 PC: 12b66 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.684864548Z 37 PC: 12b71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.686390752Z 37 PC: 12b73 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.687394921Z 26 PC: 12b7c | Set disk transfer address
2018-12-17T22:05:16.688337867Z 78 PC: 12ba2 | Find first file
2018-12-17T22:05:16.69278884Z 26 PC: 12c15 | Set disk transfer address
2018-12-17T22:05:16.693880269Z 37 PC: 12c1a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:05:16.694960615Z 51 PC: 12c1e | Get or set Ctrl-Break