Sample viewer

vx.netlux.org/Virus.DOS.Murphy.1417

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:22:43.457780004Z 75 PC: 13874 | Execute program
2018-12-17T22:22:43.460830549Z 98 PC: 13912 | Get current PSP
2018-12-17T22:22:43.462308179Z 73 PC: 13918 | Release memory
2018-12-17T22:22:43.464054069Z 72 PC: 1391f | Allocate memory
2018-12-17T22:22:43.466256923Z 74 PC: 1392e | Reallocate memory
2018-12-17T22:22:43.473514377Z 74 PC: 1393e | Reallocate memory
2018-12-17T22:22:43.475214658Z 98 PC: 1397b | Get current PSP
2018-12-17T22:22:43.476801158Z 48 PC: 12a87 | Get DOS version
2018-12-17T22:22:43.479456216Z 9 PC: 12a96 | Display string (String= 'The Norton Commander, Copyright (C) 1986, 88, 89, Peter Norton Computing, Inc. ')
2018-12-17T22:22:43.486150087Z 74 PC: 12adc | Reallocate memory
2018-12-17T22:22:43.488755993Z 37 PC: 12af0 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:22:43.491043864Z 51 PC: 12d58 | Get or set Ctrl-Break
2018-12-17T22:22:43.492758373Z 51 PC: 12d63 | Get or set Ctrl-Break
2018-12-17T22:22:43.494603078Z 72 PC: 13109 | Allocate memory
2018-12-17T22:22:43.497186042Z 41 PC: 13184 | Parse filename
2018-12-17T22:22:43.500614351Z 41 PC: 1318d | Parse filename
2018-12-17T22:22:43.503072778Z 61 PC: 9f8b8 | Open file (Filename = 'A:\NCMAIN.EXE')
2018-12-17T22:22:43.51151699Z 75 PC: 13157 | Execute program