Sample viewer

vx.netlux.org/Virus.DOS.Dolphin.567

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:13.651432059Z 64 PC: 0 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:21:13.65797936Z 41 PC: 94fae | Parse filename
2018-12-17T22:21:13.678774523Z 41 PC: 9502f | Parse filename
2018-12-17T22:21:13.680671235Z 41 PC: 9504c | Parse filename
2018-12-17T22:21:13.683472742Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T22:21:13.686427517Z 71 PC: 986f3 | Get current directory
2018-12-17T22:21:13.689571582Z 78 PC: 986fe | Find first file
2018-12-17T22:21:13.699716043Z 71 PC: 986f3 | Get current directory
2018-12-17T22:21:13.703420691Z 78 PC: 986fe | Find first file
2018-12-17T22:21:13.725711865Z 64 PC: 9a848 | Write file or device (Write 26 bytes on handle 2)
2018-12-17T22:21:13.730580578Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:21:13.733342725Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:21:13.735975196Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:21:13.737426858Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.739786706Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.741523637Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.74328279Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.745323604Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.752507612Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.754246055Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.755951675Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.758462496Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.760094379Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.761711275Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.764036263Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.765728812Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.767392819Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.769763705Z 62 PC: 122ab | Close file
2018-12-17T22:21:13.771532715Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T22:21:13.772876416Z 56 PC: 94df9 | Get or set country info
2018-12-17T22:21:13.775335721Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:21:13.780673676Z 25 PC: 94e62 | Get default drive
2018-12-17T22:21:13.782582968Z 71 PC: 970dd | Get current directory
2018-12-17T22:21:13.787808898Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:21:13.8073595Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T22:21:13.80992855Z 93 PC: 94f20 | File sharing functions
2018-12-17T22:21:13.812173868Z 93 PC: 94f27 | File sharing functions
2018-12-17T22:21:13.816463193Z 10 PC: 94f39 | Buffered keyboard input
2018-12-17T22:21:28.697962669Z 0 PC: 0 | Program terminate
2018-12-17T22:21:30.052235956Z 0 PC: 0 | Program terminate
2018-12-17T22:21:30.15467267Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:21:30.162139826Z 41 PC: 94fae | Parse filename
2018-12-17T22:21:30.164282127Z 41 PC: 9502f | Parse filename
2018-12-17T22:21:30.166034151Z 41 PC: 9504c | Parse filename
2018-12-17T22:21:30.170672023Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T22:21:30.172432692Z 71 PC: 986f3 | Get current directory
2018-12-17T22:21:30.180100459Z 78 PC: 986fe | Find first file
2018-12-17T22:21:30.190710437Z 71 PC: 9856c | Get current directory
2018-12-17T22:21:30.193678681Z 73 PC: 97c09 | Release memory
2018-12-17T22:21:30.194948521Z 75 PC: 11821 | Execute program
2018-12-17T22:21:30.210873003Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T22:21:30.21651906Z 76 PC: 12a4b | Terminate with return code (Return code = '36')