Sample viewer

vx.netlux.org/Virus.DOS.Kreg.1405

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:15:48.417127914Z 98 PC: 14009 | Get current PSP
2018-12-17T22:15:48.419028143Z 170 PC: 14012 | UNKNOWN!
2018-12-17T22:15:48.4198893Z 53 PC: 14041 | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T22:15:48.420979106Z 37 PC: 14051 | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T22:15:48.422590137Z 53 PC: 14056 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:48.423708901Z 37 PC: 14076 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:48.425075062Z 9 PC: 13e30 | Display string (String= 'E2k/E1k/PCMCIA Ethernet Packet Driver (941017) Ver 1.08 ')
2018-12-17T22:15:48.431513725Z 9 PC: 13e37 | Display string (String= 'R.P.T.I. International Ltd. ')
2018-12-17T22:15:48.437092015Z 9 PC: 13c32 | Display string (String= ' To load packet driver, usage: ETHPK To unload packet driver, usage: ETHPK -u ')
2018-12-17T22:15:48.449896647Z 76 PC: 13d89 | Terminate with return code (Return code = '18')