Sample viewer

vx.netlux.org/Virus.DOS.Preacher.488

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:14:09.009581144Z 53 PC: 12ba4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:14:09.011879903Z 37 PC: 12bc0 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:14:09.013370072Z 74 PC: 12bd7 | Reallocate memory
2018-12-17T22:14:09.0151293Z 60 PC: 12be2 | Create or truncate file
2018-12-17T22:14:09.669411905Z 64 PC: 12bf3 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:14:09.67879749Z 62 PC: 12bf7 | Close file
2018-12-17T22:14:09.687007727Z 75 PC: 12c12 | Execute program
2018-12-17T22:14:09.701342385Z 9 PC: 22ae5 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ')
2018-12-17T22:14:09.707221642Z 0 PC: 22ae9 | Program terminate
2018-12-17T22:14:09.710240229Z 49 PC: 12c1f | Terminate and stay resident (Return code = '0' | Memory size = '4096')