Sample viewer

vx.netlux.org/Virus.DOS.Dot.944.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:12:07.399286839Z 37 PC: 12a4b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:12:07.400892547Z 26 PC: 12a52 | Set disk transfer address
2018-12-17T23:12:07.404030866Z 61 PC: 12d59 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T23:12:07.411323901Z 87 PC: 12d62 | Get or set file date and time
2018-12-17T23:12:07.413235474Z 67 PC: 12d77 | Get or set file attributes
2018-12-17T23:12:07.420766291Z 67 PC: 12d7f | Get or set file attributes
2018-12-17T23:12:07.767785256Z 87 PC: 12a95 | Get or set file date and time
2018-12-17T23:12:07.76982576Z 66 PC: 12d91 | Move file pointer
2018-12-17T23:12:07.772158645Z 63 PC: 12aa4 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:12:07.774643573Z 66 PC: 12aad | Move file pointer
2018-12-17T23:12:07.77626274Z 64 PC: 12ac6 | Write file or device (Write 944 bytes on handle 5)
2018-12-17T23:12:07.786412198Z 66 PC: 12d91 | Move file pointer
2018-12-17T23:12:07.789202864Z 64 PC: 12ad3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:12:07.792760837Z 87 PC: 12add | Get or set file date and time
2018-12-17T23:12:07.79485584Z 67 PC: 12ae5 | Get or set file attributes
2018-12-17T23:12:07.806773042Z 62 PC: 12ae9 | Close file
2018-12-17T23:12:07.832812925Z 37 PC: 12afb | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:12:07.834403006Z 26 PC: 12b03 | Set disk transfer address
2018-12-17T23:12:07.836769176Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T23:12:07.841667543Z 76 PC: 12a86 | Terminate with return code (Return code = '36')