Sample viewer

vx.netlux.org/Virus.DOS.Xed.2869

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:20.851640708Z 68 PC: 13a6e | I/O control for devices (Set for = 'Ÿ')
2018-12-17T22:20:20.870144785Z 82 PC: 13938 | Get DOS internal pointers (SYSVARS)
2018-12-17T22:20:20.872030262Z 74 PC: 13938 | Reallocate memory
2018-12-17T22:20:20.873963997Z 74 PC: 13938 | Reallocate memory
2018-12-17T22:20:20.876643889Z 74 PC: 13938 | Reallocate memory
2018-12-17T22:20:20.880120524Z 54 PC: 9ef28 | Get free disk space
2018-12-17T22:20:20.889775459Z 53 PC: 9ef28 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:20.891031297Z 37 PC: 9ef28 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:20.893293063Z 67 PC: 9ef28 | Get or set file attributes
2018-12-17T22:20:20.899664699Z 67 PC: 9ef28 | Get or set file attributes
2018-12-17T22:20:20.913332686Z 61 PC: 9ef28 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:20:20.920888651Z 37 PC: 9ef28 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:20.92233841Z 61 PC: 13cae | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:20:20.929135582Z 62 PC: 13938 | Close file
2018-12-17T22:20:20.939644979Z 9 PC: 12ad3 | Display string (String= ' Mabuhay! This program came from Bahay Kawayan at http://come.to/hexfiles Putoksa Kawayan [email protected] ')
2018-12-17T22:20:20.953158196Z 76 PC: 12ad7 | Terminate with return code (Return code = '36')