Sample viewer

vx.netlux.org/Virus.DOS.Carnivore.504

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:24:43.053253377Z 53 PC: 12aab | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:24:43.055526239Z 37 PC: 12abf | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:24:43.057702378Z 61 PC: 12c29 | Open file (Filename = 'Hؠ')
2018-12-17T22:24:43.065733677Z 63 PC: 12c29 | Read file or device (Read 504 bytes on handle 5)
2018-12-17T22:24:43.069580011Z 66 PC: 12c29 | Move file pointer
2018-12-17T22:24:43.071805072Z 63 PC: 12c29 | Read file or device (Read 504 bytes on handle 5)
2018-12-17T22:24:43.079714839Z 66 PC: 12c29 | Move file pointer
2018-12-17T22:24:43.081616487Z 64 PC: 12c29 | Write file or device (Write 504 bytes on handle 5)
2018-12-17T22:24:43.089778521Z 66 PC: 12c29 | Move file pointer
2018-12-17T22:24:43.091737558Z 64 PC: 12c29 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:24:43.105987909Z 62 PC: 12c29 | Close file
2018-12-17T22:24:43.114993633Z 75 PC: 12b93 | Execute program
2018-12-17T22:24:43.128174769Z 53 PC: 13bab | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:24:43.129718081Z 37 PC: 13bbf | Set interrupt vector (Interrupt = '33' AKA 'Random read')