Sample viewer

vx.netlux.org/Virus.DOS.Jacov.595

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:55:43.777857793Z 53 PC: 12c63 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:55:43.779490978Z 37 PC: 12c71 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:55:43.780609602Z 26 PC: 12c98 | Set disk transfer address
2018-12-17T21:55:43.781713229Z 78 PC: 12cb5 | Find first file
2018-12-17T21:55:43.787870214Z 61 PC: 12cc1 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:55:43.794041273Z 63 PC: 12ccd | Read file or device (Read 26 bytes on handle 5)
2018-12-17T21:55:43.796347361Z 62 PC: 12cd1 | Close file
2018-12-17T21:55:43.798157109Z 79 PC: 12cb5 | Find next file
2018-12-17T21:55:43.800646189Z 78 PC: 12cb5 | Find first file
2018-12-17T21:55:43.806111016Z 37 PC: 12df3 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:55:43.807426415Z 26 PC: 12dfd | Set disk transfer address
2018-12-17T21:55:43.808677093Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T21:55:43.812686496Z 76 PC: 12a86 | Terminate with return code (Return code = '36')