Sample viewer

vx.netlux.org/Virus.DOS.YZ.1230

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:09:04.094461295Z 239 PC: 2002e | UNKNOWN!
2018-12-17T22:09:04.095795623Z 53 PC: 2007c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:09:04.096909852Z 53 PC: 2008b | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:09:04.098246017Z 37 PC: 2009d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:09:04.099505529Z 37 PC: 200a5 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:09:04.100699097Z 80 PC: 13fb9 | Set current PSP
2018-12-17T22:09:04.10207485Z 48 PC: 13fbe | Get DOS version
2018-12-17T22:09:04.104200803Z 101 PC: 14044 | Get extended country info
2018-12-17T22:09:04.105934381Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-17T22:09:04.108102804Z 74 PC: 140ac | Reallocate memory
2018-12-17T22:09:04.109953139Z 25 PC: 140e3 | Get default drive
2018-12-17T22:09:04.111472011Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:09:04.113133289Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:09:04.115504316Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:09:04.118477561Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:09:04.120640557Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:09:04.124544948Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:09:04.126431293Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:09:04.130127781Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:09:04.133542999Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:09:04.135904113Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T22:09:04.138685577Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:09:04.141599825Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.143614724Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:09:04.146026297Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.148607581Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T22:09:04.150863836Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:09:04.152892204Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:09:04.155151219Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T22:09:04.157234107Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:09:04.159261923Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.161432564Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:09:04.163469351Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T22:09:04.165589537Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T22:09:04.167992892Z 2 PC: 13e6c | Character output (Char = '44')
2018-12-17T22:09:04.171612597Z 2 PC: 13e6c | Character output (Char = '4f')
2018-12-17T22:09:04.174112035Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T22:09:04.17631591Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:09:04.178420814Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T22:09:04.180544999Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:09:04.183006815Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.185396726Z 2 PC: 13e6c | Character output (Char = '56')
2018-12-17T22:09:04.187788116Z 2 PC: 13e6c | Character output (Char = '65')
2018-12-17T22:09:04.191253036Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:09:04.193596482Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:09:04.195770597Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:09:04.198510986Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.200490457Z 2 PC: 13e6c | Character output (Char = '6e')
2018-12-17T22:09:04.202468813Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.205202551Z 2 PC: 13e6c | Character output (Char = '36')
2018-12-17T22:09:04.207243751Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T22:09:04.209288815Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T22:09:04.213159445Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T22:09:04.21560512Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:09:04.217552547Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:09:04.221602408Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.224312026Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.226439576Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.229071692Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.231392439Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.233492031Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.240207762Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.242423Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.244609207Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.248388633Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.250864452Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.253303634Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.255859206Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.258039096Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:09:04.260678341Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:09:04.263118007Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:09:04.266461749Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:09:04.269509763Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.271701331Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T22:09:04.274029564Z 2 PC: 13e6c | Character output (Char = '79')
2018-12-17T22:09:04.277526053Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:09:04.279570638Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:09:04.281840076Z 2 PC: 13e6c | Character output (Char = '67')
2018-12-17T22:09:04.284641194Z 2 PC: 13e6c | Character output (Char = '68')
2018-12-17T22:09:04.286832924Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:09:04.290141525Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.292891209Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:09:04.294888674Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:09:04.296898002Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T22:09:04.299839737Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:09:04.302280897Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.304499716Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:09:04.307832752Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.309868216Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T22:09:04.311908254Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:09:04.31573711Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.317798914Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:09:04.319841545Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:09:04.322350261Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:09:04.325587275Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T22:09:04.327767916Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:09:04.330631707Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:09:04.33297119Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:09:04.335227368Z 2 PC: 13e6c | Character output (Char = '38')
2018-12-17T22:09:04.33835259Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:09:04.34072148Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T22:09:04.342944257Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:09:04.345633612Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:09:04.34813914Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:09:04.350214124Z 2 PC: 13e6c | Character output (Char = '34')
2018-12-17T22:09:04.35362053Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T22:09:04.355674921Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:09:04.357585658Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:09:04.362678698Z 74 PC: 12d4c | Reallocate memory
2018-12-17T22:09:04.364197739Z 72 PC: 12d8d | Allocate memory
2018-12-17T22:09:04.366025592Z 72 PC: 12dc5 | Allocate memory
2018-12-17T22:09:04.368782923Z 72 PC: 12dcd | Allocate memory