Sample viewer

vx.netlux.org/Virus.DOS.Datalock.920.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:23:57.053853977Z 190 PC: 12cb1 | UNKNOWN!
2018-12-17T22:23:57.054937032Z 53 PC: 12ce9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:23:57.055772909Z 37 PC: 12cfc | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:23:57.056551478Z 53 PC: 9f715 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:57.057683534Z 37 PC: 9f729 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:57.058441763Z 67 PC: 9f730 | Get or set file attributes
2018-12-17T22:23:57.061872076Z 61 PC: 9f74a | Open file (Filename = '~WJWUWW')
2018-12-17T22:23:57.068301967Z 37 PC: 9f897 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:23:57.069198221Z 190 PC: 12d09 | UNKNOWN!
2018-12-17T22:23:57.069809172Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:23:57.072215209Z 76 PC: 12a86 | Terminate with return code (Return code = '36')