Sample viewer

vx.netlux.org/Trojan.DOS.Slavik.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:41:34.855349819Z 48 PC: 18740 | Get DOS version
2018-12-17T22:41:34.85795328Z 74 PC: 18790 | Reallocate memory
2018-12-17T22:41:34.859938014Z 48 PC: 184fe | Get DOS version
2018-12-17T22:41:34.86115482Z 53 PC: 18506 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:34.862466643Z 37 PC: 18518 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:34.865194139Z 53 PC: 1b482 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:34.866721307Z 37 PC: 1b492 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:41:34.868138576Z 53 PC: 1b497 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:34.870099816Z 37 PC: 1b4a7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:41:34.871295614Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:34.872334558Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:34.874004933Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:34.875420817Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:34.876810005Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:34.879039224Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:34.880447599Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:34.881873193Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:34.884012316Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:34.885543725Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:34.886487315Z 53 PC: 191d6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:41:34.888309986Z 37 PC: 19205 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:41:34.889383353Z 37 PC: 19205 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:41:34.89024944Z 37 PC: 19205 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:41:34.891658566Z 37 PC: 19205 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:41:34.8928069Z 37 PC: 19205 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:41:34.893605344Z 37 PC: 19205 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:41:34.895292089Z 37 PC: 19205 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:41:34.896572269Z 37 PC: 19205 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:41:34.897898472Z 37 PC: 1920c | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:41:34.899557961Z 37 PC: 19211 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:41:34.905545549Z 68 PC: 185a9 | I/O control for devices (Set for = '��s��� �3�U��VW�^�F����w;v�;��u��;�� �u� �� �_^]�')
2018-12-17T22:41:34.906768241Z 68 PC: 185a9 | I/O control for devices (Set for = '�')
2018-12-17T22:41:34.909875017Z 68 PC: 185a9 | I/O control for devices (Set for = '')
2018-12-17T22:41:34.911022617Z 68 PC: 185a9 | I/O control for devices (Set for = '�.�.� �����r �u農�� �t����')
2018-12-17T22:41:34.912148391Z 68 PC: 185a9 | I/O control for devices (Set for = '�.�.� �����r �u農�� �t����')
2018-12-17T22:41:34.925383347Z 53 PC: 15d26 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:34.926396154Z 53 PC: 15d33 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:41:34.927238521Z 53 PC: 15d40 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:34.928293145Z 37 PC: 15d55 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:41:34.936980515Z 37 PC: 15d5d | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:41:34.939206757Z 37 PC: 15d65 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:41:34.942472821Z 53 PC: 1629e | Get interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:41:34.944547417Z 53 PC: 162ab | Get interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:41:34.946752044Z 53 PC: 162ba | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:41:34.949120091Z 37 PC: 162c7 | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T22:41:34.951662369Z 53 PC: 162ce | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:41:34.954049571Z 37 PC: 162db | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T22:41:34.959989676Z 53 PC: 162e7 | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:41:34.964310145Z 48 PC: 163a9 | Get DOS version
2018-12-17T22:41:34.965771601Z 74 PC: 17a3b | Reallocate memory
2018-12-17T22:41:34.967334327Z 74 PC: 17a3b | Reallocate memory
2018-12-17T22:41:34.969321427Z 68 PC: 15c9c | I/O control for devices (Set for = 'ik v. 1.03')
2018-12-17T22:41:34.970443859Z 68 PC: 15c9c | I/O control for devices (Set for = '')
2018-12-17T22:41:34.971568836Z 51 PC: 15cba | Get or set Ctrl-Break
2018-12-17T22:41:34.973668379Z 51 PC: 15cc6 | Get or set Ctrl-Break
2018-12-17T22:41:34.985855318Z 61 PC: 1318e | Open file (Filename = 'C:\WINDOWS\SLAVIK.EXE')
2018-12-17T22:41:34.997416296Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.000490749Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.002930124Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.005874399Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.00915399Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.011426253Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.013803098Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.01673091Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.018746409Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.020955755Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.023642187Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.025613702Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.027548149Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.030238017Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.03325519Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.035191634Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.038545495Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.040652954Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.04273319Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.048076152Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.050891236Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.053344006Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.05673165Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.059579437Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.06199384Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.065279165Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.067735768Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.069950319Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.073205455Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.075140527Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.077281857Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.081196042Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.083397142Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.085592403Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.089159737Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.091396582Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.093564067Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.096386521Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.09974165Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.102350145Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.105029463Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.107731685Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.109766333Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.113279082Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.115191337Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.118029934Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.12100901Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.122944246Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.124716313Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.128841447Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.131142221Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.133472783Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.136126632Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.138593234Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.140928921Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.143682464Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.146461503Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.149263005Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.152737769Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.155144474Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.157538125Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.160824297Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.163312246Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.165555173Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.168708849Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.171157061Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.173648477Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.176631703Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.179281247Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.182236895Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.185367486Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.187783208Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.190154406Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.193387591Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.195787956Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.198141698Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.201158504Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.20424866Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.206569346Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.209757221Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.21226319Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.21459654Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.217842261Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.219992358Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.2220756Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.225399052Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.227543677Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.229659318Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.232587206Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.234864225Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.237198293Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.240199669Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.24255452Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.244876306Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.248223482Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.250577197Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.253024662Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.256356403Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.258683997Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.261002398Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.264885136Z 6 PC: 15c6d | Direct console I/O
2018-12-17T22:41:35.268453829Z 12 PC: 15d16 | Flush input buffer and input