Sample viewer

vx.netlux.org/Virus.DOS.KOV.1036

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:35:28.377333199Z 255 PC: 12a8c | UNKNOWN!
2018-12-17T22:35:28.378640109Z 53 PC: 12a97 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:35:28.379825864Z 47 PC: 12abd | Get disk transfer address
2018-12-17T22:35:28.38103049Z 71 PC: 9f741 | Get current directory
2018-12-17T22:35:28.384716296Z 26 PC: 9f748 | Set disk transfer address
2018-12-17T22:35:28.385888367Z 59 PC: 9f765 | Change current directory
2018-12-17T22:35:28.389749073Z 53 PC: 9f76a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:28.391148777Z 37 PC: 9f773 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:28.393992558Z 78 PC: 9fa25 | Find first file
2018-12-17T22:35:28.400187785Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.402631327Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.405644322Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.408026192Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.410441959Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.413344849Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.415637759Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.417992076Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.421380068Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.424160419Z 78 PC: 9fa25 | Find first file
2018-12-17T22:35:28.4303242Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.433366052Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.444506177Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.447370866Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.451492734Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.454020422Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.456468267Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.459554088Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.462042258Z 79 PC: 9fa25 | Find next file
2018-12-17T22:35:28.464136051Z 37 PC: 9f7fe | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:28.465293957Z 59 PC: 9f807 | Change current directory
2018-12-17T22:35:28.469740481Z 26 PC: 12ad5 | Set disk transfer address