Sample viewer

vx.netlux.org/Virus.DOS.DieHard2.4000.e

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:50:44.732310204Z 51 PC: 13919 | Get or set Ctrl-Break
2018-12-17T21:50:44.734999595Z 43 PC: 137c9 | Set date
2018-12-17T21:50:44.736363488Z 53 PC: 137d2 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T21:50:44.739069296Z 48 PC: 1386e | Get DOS version
2018-12-17T21:50:44.741989122Z 47 PC: 12d61 | Get disk transfer address
2018-12-17T21:50:44.743287662Z 26 PC: 12d61 | Set disk transfer address
2018-12-17T21:50:44.744628274Z 78 PC: 12d61 | Find first file
2018-12-17T21:50:44.752428765Z 67 PC: 12d61 | Get or set file attributes
2018-12-17T21:50:44.768614691Z 61 PC: 12d61 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T21:50:44.773403129Z 63 PC: 12d61 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T21:50:44.77591264Z 66 PC: 12d61 | Move file pointer
2018-12-17T21:50:44.777093876Z 63 PC: 12d61 | Read file or device (Read 54 bytes on handle 5)
2018-12-17T21:50:44.778936644Z 64 PC: 12d61 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T21:50:44.78119868Z 87 PC: 12d61 | Get or set file date and time
2018-12-17T21:50:44.787080389Z 62 PC: 12d61 | Close file
2018-12-17T21:50:44.791928046Z 67 PC: 12d61 | Get or set file attributes
2018-12-17T21:50:44.798160805Z 26 PC: 12d61 | Set disk transfer address
2018-12-17T21:50:44.799956903Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T21:50:44.802537008Z 76 PC: 12a86 | Terminate with return code (Return code = '36')