Sample viewer

vx.netlux.org/Virus.DOS.WpcBats.2279

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:38:51.111011072Z 53 PC: 12acf | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:38:51.113170769Z 53 PC: 12adc | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:38:51.114437128Z 53 PC: 12ae9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:38:51.115606316Z 37 PC: 12b1a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:38:51.117011025Z 37 PC: 1318b | Set interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:38:51.119418443Z 37 PC: 1318b | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:38:51.121092921Z 73 PC: 1318b | Release memory
2018-12-17T22:38:51.122623268Z 49 PC: 1318b | Terminate and stay resident (Return code = '147' | Memory size = '201')
2018-12-17T22:38:51.145593944Z 75 PC: 12c06 | Execute program
2018-12-17T22:38:51.152376981Z 75 PC: 12c06 | Execute program
2018-12-17T22:38:51.167998746Z 9 PC: 137c3 | Display string (String= ' Mabuhay! This program came from Bahay Kawayan at http://come.to/hexfiles Putoksa Kawayan [email protected] ')
2018-12-17T22:38:51.182345804Z 76 PC: 137c7 | Terminate with return code (Return code = '36')