.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:29:05.716821705Z | 151 | PC: 12a46 | UNKNOWN! |
| 2018-12-17T22:29:05.717982586Z | 74 | PC: 12a59 | Reallocate memory |
| 2018-12-17T22:29:05.720121897Z | 72 | PC: 12a60 | Allocate memory |
| 2018-12-17T22:29:05.722125872Z | 53 | PC: 9f852 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:29:05.724099608Z | 37 | PC: 9f865 | Set interrupt vector (Interrupt = '145' AKA 'UNKNOWN!') |
| 2018-12-17T22:29:05.727333068Z | 37 | PC: 9f86e | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:29:05.729028721Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:29:05.730529279Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:29:05.741633972Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:29:05.74984086Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:29:05.752930975Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:29:05.75592274Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0100h/00256d. Virus might be activ? ') |
| 2018-12-17T22:29:05.75999428Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |