Sample viewer

vx.netlux.org/Virus.DOS.Necropolis.f

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:25:25.047860799Z 48 PC: 12a44 | Get DOS version
2018-12-17T22:25:25.050661389Z 74 PC: 12a5b | Reallocate memory
2018-12-17T22:25:25.053238761Z 11 PC: 12b6e | Get input status
2018-12-17T22:25:25.056714645Z 73 PC: 13136 | Release memory
2018-12-17T22:25:25.05874242Z 73 PC: 1313e | Release memory
2018-12-17T22:25:25.061299431Z 80 PC: 13146 | Set current PSP
2018-12-17T22:25:25.062591704Z 37 PC: 1314f | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:25:25.06418737Z 72 PC: 131c0 | Allocate memory
2018-12-17T22:25:25.06731264Z 72 PC: 131c0 | Allocate memory
2018-12-17T22:25:25.069322669Z 73 PC: 12a90 | Release memory
2018-12-17T22:25:25.075347968Z 61 PC: 131c0 | Open file (Filename = '')
2018-12-17T22:25:25.089144609Z 53 PC: 12e98 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:25:25.090646656Z 53 PC: 12ea3 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:25:25.092103231Z 37 PC: 12eb2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:25:25.094319109Z 37 PC: 12eb7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:25:25.096177983Z 66 PC: 131c0 | Move file pointer
2018-12-17T22:25:25.098307177Z 63 PC: 131c0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:25:25.102416421Z 66 PC: 131c0 | Move file pointer
2018-12-17T22:25:25.105261037Z 63 PC: 131c0 | Read file or device (Read 1963 bytes on handle 5)
2018-12-17T22:25:25.11384082Z 13 PC: 12fd4 | Disk reset
2018-12-17T22:25:25.115933371Z 53 PC: 12fdc | Get interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T22:25:25.133746345Z 53 PC: 12fe8 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:25:25.135069165Z 37 PC: 12ff8 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:25:25.136312178Z 37 PC: 13004 | Set interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T22:25:25.153535565Z 66 PC: 131c0 | Move file pointer
2018-12-17T22:25:25.156171728Z 64 PC: 131c0 | Write file or device (Write 1965 bytes on handle 5)
2018-12-17T22:25:25.173709245Z 66 PC: 131c0 | Move file pointer
2018-12-17T22:25:25.175336921Z 64 PC: 131c0 | Write file or device (Write 1963 bytes on handle 5)
2018-12-17T22:25:25.180614149Z 13 PC: 13081 | Disk reset
2018-12-17T22:25:25.184783836Z 37 PC: 1308b | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:25:25.186323961Z 37 PC: 13094 | Set interrupt vector (Interrupt = '64' AKA 'Write file or device')
2018-12-17T22:25:25.187357118Z 37 PC: 12fbc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:25:25.188297331Z 37 PC: 12fc4 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:25:25.189702642Z 62 PC: 131c0 | Close file
2018-12-17T22:25:25.199340027Z 53 PC: 12d83 | Get interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:25:25.20062011Z 75 PC: 131c0 | Execute program
2018-12-17T22:25:25.241893795Z 81 PC: 12dbb | Get current PSP
2018-12-17T22:25:25.24314587Z 37 PC: 12dd3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:25:25.244820532Z 81 PC: 12d57 | Get current PSP
2018-12-17T22:25:25.247293543Z 48 PC: 13e54 | Get DOS version
2018-12-17T22:25:25.249447554Z 74 PC: 131c0 | Reallocate memory
2018-12-17T22:25:25.252303247Z 11 PC: 13f7e | Get input status
2018-12-17T22:25:25.261410204Z 73 PC: 14546 | Release memory
2018-12-17T22:25:25.263776998Z 73 PC: 1454e | Release memory
2018-12-17T22:25:25.266018053Z 80 PC: 14556 | Set current PSP
2018-12-17T22:25:25.267992313Z 37 PC: 1455f | Set interrupt vector (Interrupt = '34' AKA 'Random write')