Sample viewer

vx.netlux.org/Virus.DOS.Stupidus.1504

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:06.389395726Z 48 PC: 15a27 | Get DOS version
2018-12-17T22:42:06.392535333Z 74 PC: 12b86 | Reallocate memory
2018-12-17T22:42:06.394895444Z 75 PC: 12ba7 | Execute program
2018-12-17T22:42:06.406129522Z 9 PC: 137a6 | Display string (String= 'Goat file (COM/....). Size=00002F44h/0000012100d bytes. ')
2018-12-17T22:42:06.409615412Z 48 PC: 137af | Get DOS version
2018-12-17T22:42:06.41112769Z 61 PC: 1387c | Open file (Filename = '')
2018-12-17T22:42:06.415586128Z 93 PC: 1381e | File sharing functions
2018-12-17T22:42:06.417034143Z 9 PC: 137a6 | Display string (String= 'Size change=05ECh/01516d. ')
2018-12-17T22:42:06.420470155Z 76 PC: 13803 | Terminate with return code (Return code = '1')
2018-12-17T22:42:06.423015746Z 77 PC: 12bc3 | Get program return code
2018-12-17T22:42:06.424155573Z 53 PC: 12bcb | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:06.427619653Z 37 PC: 12be1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:06.429111291Z 37 PC: 12be8 | Set interrupt vector (Interrupt = '100' AKA 'Set wait for external event flag')
2018-12-17T22:42:06.430584718Z 53 PC: 12e70 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:42:06.4332372Z 37 PC: 12e8b | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:42:06.442775214Z 49 PC: 12bef | Terminate and stay resident (Return code = '1' | Memory size = '204')