.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:29:20.250207748Z | 53 | PC: 140ef | Get interrupt vector (Interrupt = '182' AKA 'UNKNOWN!') |
| 2018-12-17T22:29:20.252752338Z | 73 | PC: 1411c | Release memory |
| 2018-12-17T22:29:20.254331995Z | 72 | PC: 14123 | Allocate memory |
| 2018-12-17T22:29:20.256314286Z | 74 | PC: 14130 | Reallocate memory |
| 2018-12-17T22:29:20.259026059Z | 74 | PC: 14141 | Reallocate memory |
| 2018-12-17T22:29:20.261290439Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:29:20.262869362Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:29:20.274238804Z | 25 | PC: 9f076 | Get default drive |
| 2018-12-17T22:29:20.276461798Z | 54 | PC: 9f076 | Get free disk space |
| 2018-12-17T22:29:20.285869021Z | 61 | PC: 9f076 | Open file (Filename = '') |
| 2018-12-17T22:29:20.30629694Z | 66 | PC: 9f076 | Move file pointer |
| 2018-12-17T22:29:20.308210792Z | 63 | PC: 9f076 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T22:29:20.311865506Z | 62 | PC: 9f076 | Close file |
| 2018-12-17T22:29:20.313698725Z | 62 | PC: 9f076 | Close file |
| 2018-12-17T22:29:20.324789192Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:29:20.331742784Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:29:20.33449085Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:29:20.337860131Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0369h/00873d. Virus might be activ? ') |
| 2018-12-17T22:29:20.343641103Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |