Sample viewer

vx.netlux.org/Virus.DOS.Warlock.1676

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:02.066918845Z 208 PC: 12f8c | UNKNOWN!
2018-12-17T22:42:02.068726621Z 53 PC: 13001 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:02.070986068Z 53 PC: 13016 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:42:02.072774369Z 37 PC: 13023 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:42:02.074587912Z 53 PC: 13078 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:42:02.079011192Z 37 PC: 130d2 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:42:02.080714193Z 37 PC: 1312d | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:02.082453093Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=00000064h/0000000100d bytes. ')
2018-12-17T22:42:02.088533737Z 76 PC: 12a86 | Terminate with return code (Return code = '36')