Sample viewer

vx.netlux.org/Virus.DOS.Fans.560

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:15:31.402723469Z 87 PC: 17c17 | Get or set file date and time
2018-12-17T23:15:31.407445034Z 53 PC: 17c50 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:15:31.409239927Z 53 PC: 17c5c | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:15:31.410930174Z 37 PC: 17c6d | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:15:31.413434301Z 22 PC: 17c7c | Create or truncate file
2018-12-17T23:15:31.41574778Z 37 PC: 17c84 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:15:31.417429371Z 37 PC: 17c8d | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T23:15:31.730634665Z 48 PC: 18097 | Get DOS version
2018-12-17T23:15:31.732463794Z 37 PC: 182f6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T23:15:31.733591133Z 37 PC: 1832a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:15:31.73472814Z 37 PC: 182c4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')