Sample viewer

vx.netlux.org/Virus.DOS.Koths.4771

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:23:48.858882395Z 53 PC: 151af | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:23:48.86436542Z 255 PC: 14fb9 | UNKNOWN!
2018-12-17T22:23:48.868121754Z 72 PC: 14da8 | Allocate memory
2018-12-17T22:23:48.870308251Z 74 PC: 14dbb | Reallocate memory
2018-12-17T22:23:48.872393689Z 72 PC: 14dc4 | Allocate memory
2018-12-17T22:23:48.875572888Z 26 PC: 137cf | Set disk transfer address
2018-12-17T22:23:48.876754762Z 2 PC: 12a88 | Character output (Char = '54')
2018-12-17T22:23:48.879107179Z 2 PC: 12a88 | Character output (Char = '75')
2018-12-17T22:23:48.881485891Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:48.884317175Z 2 PC: 12a88 | Character output (Char = '62')
2018-12-17T22:23:48.886935482Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:48.889172465Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.891209961Z 2 PC: 12a88 | Character output (Char = '47')
2018-12-17T22:23:48.893292194Z 2 PC: 12a88 | Character output (Char = '52')
2018-12-17T22:23:48.89614888Z 2 PC: 12a88 | Character output (Char = '45')
2018-12-17T22:23:48.898185858Z 2 PC: 12a88 | Character output (Char = '50')
2018-12-17T22:23:48.900114015Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.902385384Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.90409802Z 2 PC: 12a88 | Character output (Char = '56')
2018-12-17T22:23:48.905729836Z 2 PC: 12a88 | Character output (Char = '65')
2018-12-17T22:23:48.909655477Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:48.912550801Z 2 PC: 12a88 | Character output (Char = '73')
2018-12-17T22:23:48.915435511Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:48.919114396Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:48.921833731Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:48.924652776Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.933015083Z 2 PC: 12a88 | Character output (Char = '33')
2018-12-17T22:23:48.936782464Z 2 PC: 12a88 | Character output (Char = '2e')
2018-12-17T22:23:48.939485541Z 2 PC: 12a88 | Character output (Char = '30')
2018-12-17T22:23:48.942236916Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.960540024Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.963449091Z 2 PC: 12a88 | Character output (Char = '43')
2018-12-17T22:23:48.966367514Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:48.969875859Z 2 PC: 12a88 | Character output (Char = '70')
2018-12-17T22:23:48.97297254Z 2 PC: 12a88 | Character output (Char = '79')
2018-12-17T22:23:48.97580105Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:48.979166015Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:48.981695717Z 2 PC: 12a88 | Character output (Char = '67')
2018-12-17T22:23:48.984198158Z 2 PC: 12a88 | Character output (Char = '68')
2018-12-17T22:23:48.987454757Z 2 PC: 12a88 | Character output (Char = '74')
2018-12-17T22:23:48.990704874Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:48.993229068Z 2 PC: 12a88 | Character output (Char = '28')
2018-12-17T22:23:49.006262397Z 2 PC: 12a88 | Character output (Char = '63')
2018-12-17T22:23:49.009031281Z 2 PC: 12a88 | Character output (Char = '29')
2018-12-17T22:23:49.011789183Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.021485532Z 2 PC: 12a88 | Character output (Char = '31')
2018-12-17T22:23:49.036535007Z 2 PC: 12a88 | Character output (Char = '39')
2018-12-17T22:23:49.039215224Z 2 PC: 12a88 | Character output (Char = '39')
2018-12-17T22:23:49.042353089Z 2 PC: 12a88 | Character output (Char = '32')
2018-12-17T22:23:49.045778347Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.048831548Z 2 PC: 12a88 | Character output (Char = '42')
2018-12-17T22:23:49.051885986Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:49.062776609Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.065445866Z 2 PC: 12a88 | Character output (Char = '6c')
2018-12-17T22:23:49.068004421Z 2 PC: 12a88 | Character output (Char = '61')
2018-12-17T22:23:49.071325496Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.073821783Z 2 PC: 12a88 | Character output (Char = '64')
2018-12-17T22:23:49.076300073Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.080226646Z 2 PC: 12a88 | Character output (Char = '49')
2018-12-17T22:23:49.082710915Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.086030342Z 2 PC: 12a88 | Character output (Char = '74')
2018-12-17T22:23:49.089276224Z 2 PC: 12a88 | Character output (Char = '65')
2018-12-17T22:23:49.092244585Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.096781745Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.100047286Z 2 PC: 12a88 | Character output (Char = '61')
2018-12-17T22:23:49.103219295Z 2 PC: 12a88 | Character output (Char = '74')
2018-12-17T22:23:49.10625273Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:49.109299647Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:49.112714551Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.115768652Z 2 PC: 12a88 | Character output (Char = '61')
2018-12-17T22:23:49.118821273Z 2 PC: 12a88 | Character output (Char = '6c')
2018-12-17T22:23:49.122459433Z 2 PC: 12a90 | Character output (Char = '0d')
2018-12-17T22:23:49.125405814Z 2 PC: 12a96 | Character output (Char = '0a')
2018-12-17T22:23:49.130305609Z 2 PC: 12a88 | Character output (Char = '53')
2018-12-17T22:23:49.133995139Z 2 PC: 12a88 | Character output (Char = '79')
2018-12-17T22:23:49.136595011Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.139365254Z 2 PC: 12a88 | Character output (Char = '74')
2018-12-17T22:23:49.142983354Z 2 PC: 12a88 | Character output (Char = '61')
2018-12-17T22:23:49.14598903Z 2 PC: 12a88 | Character output (Char = '78')
2018-12-17T22:23:49.148748526Z 2 PC: 12a88 | Character output (Char = '3a')
2018-12-17T22:23:49.156925063Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.15981318Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.162666667Z 2 PC: 12a88 | Character output (Char = '47')
2018-12-17T22:23:49.16575183Z 2 PC: 12a88 | Character output (Char = '52')
2018-12-17T22:23:49.173846729Z 2 PC: 12a88 | Character output (Char = '45')
2018-12-17T22:23:49.177475992Z 2 PC: 12a88 | Character output (Char = '50')
2018-12-17T22:23:49.180404261Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.184532379Z 2 PC: 12a88 | Character output (Char = '5b')
2018-12-17T22:23:49.187417438Z 2 PC: 12a88 | Character output (Char = '2d')
2018-12-17T22:23:49.190296198Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.194056531Z 2 PC: 12a88 | Character output (Char = '6c')
2018-12-17T22:23:49.197240702Z 2 PC: 12a88 | Character output (Char = '63')
2018-12-17T22:23:49.200149021Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.203777984Z 2 PC: 12a88 | Character output (Char = '76')
2018-12-17T22:23:49.206991479Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:49.209831126Z 2 PC: 12a88 | Character output (Char = '64')
2018-12-17T22:23:49.217936323Z 2 PC: 12a88 | Character output (Char = '7a')
2018-12-17T22:23:49.220825836Z 2 PC: 12a88 | Character output (Char = '75')
2018-12-17T22:23:49.223660454Z 2 PC: 12a88 | Character output (Char = '77')
2018-12-17T22:23:49.226551478Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:49.23046685Z 2 PC: 12a88 | Character output (Char = '5d')
2018-12-17T22:23:49.233287801Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.236097456Z 2 PC: 12a88 | Character output (Char = '73')
2018-12-17T22:23:49.239756746Z 2 PC: 12a88 | Character output (Char = '65')
2018-12-17T22:23:49.243001253Z 2 PC: 12a88 | Character output (Char = '61')
2018-12-17T22:23:49.245881818Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.249371569Z 2 PC: 12a88 | Character output (Char = '63')
2018-12-17T22:23:49.252823284Z 2 PC: 12a88 | Character output (Char = '68')
2018-12-17T22:23:49.262078284Z 2 PC: 12a88 | Character output (Char = '73')
2018-12-17T22:23:49.273384196Z 2 PC: 12a88 | Character output (Char = '74')
2018-12-17T22:23:49.277082001Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.279972684Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:49.30014813Z 2 PC: 12a88 | Character output (Char = '6e')
2018-12-17T22:23:49.304056896Z 2 PC: 12a88 | Character output (Char = '67')
2018-12-17T22:23:49.307885927Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.31079187Z 2 PC: 12a88 | Character output (Char = '66')
2018-12-17T22:23:49.314194574Z 2 PC: 12a88 | Character output (Char = '69')
2018-12-17T22:23:49.316707227Z 2 PC: 12a88 | Character output (Char = '6c')
2018-12-17T22:23:49.319185038Z 2 PC: 12a88 | Character output (Char = '65')
2018-12-17T22:23:49.322241021Z 2 PC: 12a88 | Character output (Char = '5b')
2018-12-17T22:23:49.324971276Z 2 PC: 12a88 | Character output (Char = '73')
2018-12-17T22:23:49.327753744Z 2 PC: 12a88 | Character output (Char = '5d')
2018-12-17T22:23:49.330959091Z 2 PC: 12a90 | Character output (Char = '0d')
2018-12-17T22:23:49.334869815Z 2 PC: 12a96 | Character output (Char = '0a')
2018-12-17T22:23:49.340695876Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.346453726Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.349624887Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.354128971Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.357888618Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.361069201Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.374775507Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.391650449Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.394543852Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.397285197Z 2 PC: 12a88 | Character output (Char = '47')
2018-12-17T22:23:49.401128925Z 2 PC: 12a88 | Character output (Char = '52')
2018-12-17T22:23:49.404649807Z 2 PC: 12a88 | Character output (Char = '45')
2018-12-17T22:23:49.409103479Z 2 PC: 12a88 | Character output (Char = '50')
2018-12-17T22:23:49.413027284Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.417533652Z 2 PC: 12a88 | Character output (Char = '3f')
2018-12-17T22:23:49.420411086Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.423285216Z 2 PC: 12a88 | Character output (Char = '66')
2018-12-17T22:23:49.427324199Z 2 PC: 12a88 | Character output (Char = '6f')
2018-12-17T22:23:49.43036333Z 2 PC: 12a88 | Character output (Char = '72')
2018-12-17T22:23:49.43329693Z 2 PC: 12a88 | Character output (Char = '20')
2018-12-17T22:23:49.437046114Z 2 PC: 12a88 | Character output (Char = '68')
2018-12-17T22:23:49.452333128Z 2 PC: 12a88 | Character output (Char = '65')
2018-12-17T22:23:49.455261766Z 2 PC: 12a88 | Character output (Char = '6c')
2018-12-17T22:23:49.458367469Z 2 PC: 12a88 | Character output (Char = '70')
2018-12-17T22:23:49.460930867Z 2 PC: 12a90 | Character output (Char = '0d')
2018-12-17T22:23:49.463524796Z 2 PC: 12a96 | Character output (Char = '0a')
2018-12-17T22:23:49.46864418Z 76 PC: 1319a | Terminate with return code (Return code = '0')