Sample viewer

vx.netlux.org/Virus.DOS.HLLP.5984.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:11:09.427749571Z 204 PC: 13bbb | UNKNOWN!
2018-12-17T23:11:09.429995435Z 74 PC: 13bdc | Reallocate memory
2018-12-17T23:11:09.432813996Z 74 PC: 13be9 | Reallocate memory
2018-12-17T23:11:09.435086771Z 72 PC: 13bf0 | Allocate memory
2018-12-17T23:11:09.438655554Z 53 PC: 9f560 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:09.440637511Z 53 PC: 9f56d | Get interrupt vector (Interrupt = '42' AKA 'Get date')
2018-12-17T23:11:09.442635259Z 37 PC: 9f57d | Set interrupt vector (Interrupt = '42' AKA 'Get date')
2018-12-17T23:11:09.444992002Z 48 PC: 9f581 | Get DOS version
2018-12-17T23:11:09.450715878Z 37 PC: 9f590 | Set interrupt vector (Interrupt = '42' AKA 'Get date')
2018-12-17T23:11:09.453945543Z 37 PC: 9f59a | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:11:09.455594163Z 48 PC: 9f5ac | Get DOS version
2018-12-17T23:11:09.458541797Z 37 PC: 9f5b6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:11:09.460183315Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000011A0h/0000004512d bytes. ')
2018-12-17T23:11:09.465971301Z 76 PC: 12a86 | Terminate with return code (Return code = '36')