Sample viewer

vx.netlux.org/Virus.DOS.RGB.544

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:11.165443144Z 53 PC: 12a6a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:42:11.16784123Z 37 PC: 12a7a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:42:11.16927306Z 71 PC: 12a90 | Get current directory
2018-12-17T22:42:11.172356729Z 25 PC: 12a94 | Get default drive
2018-12-17T22:42:11.17452438Z 26 PC: 12ac5 | Set disk transfer address
2018-12-17T22:42:11.176426754Z 14 PC: 12b2d | Set default drive (Drive = 'à')
2018-12-17T22:42:11.177985011Z 59 PC: 12b33 | Change current directory
2018-12-17T22:42:11.180287357Z 78 PC: 12b3d | Find first file
2018-12-17T22:42:11.187246049Z 79 PC: 12c13 | Find next file
2018-12-17T22:42:11.189787238Z 79 PC: 12c13 | Find next file
2018-12-17T22:42:11.192719738Z 79 PC: 12c13 | Find next file
2018-12-17T22:42:11.196679741Z 79 PC: 12c13 | Find next file
2018-12-17T22:42:11.199620889Z 79 PC: 12c13 | Find next file
2018-12-17T22:42:11.202541462Z 67 PC: 12b5d | Get or set file attributes
2018-12-17T22:42:11.222004797Z 61 PC: 12b67 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:42:11.231329711Z 63 PC: 12b77 | Read file or device (Read 544 bytes on handle 5)
2018-12-17T22:42:11.23812193Z 66 PC: 12b98 | Move file pointer
2018-12-17T22:42:11.240595759Z 64 PC: 12ba4 | Write file or device (Write 544 bytes on handle 5)
2018-12-17T22:42:11.249500948Z 66 PC: 12baf | Move file pointer
2018-12-17T22:42:11.251077004Z 64 PC: 12be1 | Write file or device (Write 544 bytes on handle 5)
2018-12-17T22:42:11.259741964Z 87 PC: 12bf3 | Get or set file date and time
2018-12-17T22:42:11.262182838Z 62 PC: 12bf7 | Close file
2018-12-17T22:42:11.270498848Z 67 PC: 12c05 | Get or set file attributes
2018-12-17T22:42:11.280857987Z 14 PC: 12c23 | Set default drive (Drive = 'A')
2018-12-17T22:42:11.2830907Z 59 PC: 12c2a | Change current directory
2018-12-17T22:42:11.286990101Z 37 PC: 12c39 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:42:11.290294772Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:42:11.298816269Z 76 PC: 12a86 | Terminate with return code (Return code = '36')