Sample viewer

vx.netlux.org/Virus.DOS.Horse.1160

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:17:34.107001251Z 75 PC: 12a57 | Execute program
2018-12-17T22:17:34.110163855Z 82 PC: 9fa8d | Get DOS internal pointers (SYSVARS)
2018-12-17T22:17:34.111874866Z 255 PC: 9fac0 | UNKNOWN!
2018-12-17T22:17:34.113079077Z 48 PC: 9fac9 | Get DOS version
2018-12-17T22:17:34.117812586Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:17:34.118986703Z 72 PC: 12174 | Allocate memory
2018-12-17T22:17:34.120727764Z 72 PC: 1218d | Allocate memory
2018-12-17T22:17:34.123195385Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:17:34.124461516Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:17:34.125603856Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')