Sample viewer

vx.netlux.org/Virus.DOS.Lightning.4251

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:26:50.257926381Z 37 PC: 12c43 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:26:50.259486151Z 37 PC: 12c4f | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:26:50.26112987Z 202 PC: 12cf1 | UNKNOWN!
2018-12-17T22:26:50.261846863Z 53 PC: 12cff | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:26:50.263347192Z 53 PC: 12d10 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:26:50.264237819Z 88 PC: 12d1f | case 0xGet or set allocation strateg:
2018-12-17T22:26:50.26513913Z 88 PC: 12d2b | case 0xGet or set allocation strateg:
2018-12-17T22:26:50.266501101Z 72 PC: 12d32 | Allocate memory
2018-12-17T22:26:50.268267896Z 98 PC: 12d3b | Get current PSP
2018-12-17T22:26:50.268981909Z 74 PC: 12d4e | Reallocate memory
2018-12-17T22:26:50.270180027Z 72 PC: 12d5d | Allocate memory
2018-12-17T22:26:50.272150372Z 72 PC: 12d60 | Allocate memory
2018-12-17T22:26:50.273443767Z 88 PC: 12d6e | case 0xGet or set allocation strateg:
2018-12-17T22:26:50.274630105Z 37 PC: 12d9e | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:26:50.27606746Z 37 PC: 12da7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:26:50.277100558Z 98 PC: 12c95 | Get current PSP
2018-12-17T22:26:50.277852416Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:26:50.282134484Z 76 PC: 12a86 | Terminate with return code (Return code = '36')