Sample viewer

vx.netlux.org/Virus.DOS.AntiTrace.1946

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:42.356076572Z 192 PC: 133ac | UNKNOWN!
2018-12-17T22:44:42.360219667Z 48 PC: 12e4c | Get DOS version
2018-12-17T22:44:42.362988907Z 9 PC: 132c5 | Display string (String= 'Drive A: ')
2018-12-17T22:44:42.366067331Z 9 PC: 132c5 | Display string (String= '3.5" (1.44MB). ')
2018-12-17T22:44:42.369743874Z 9 PC: 132c5 | Display string (String= 'Drive B: ')
2018-12-17T22:44:42.373591672Z 9 PC: 132c5 | Display string (String= '3.5" (1.44MB). ')
2018-12-17T22:44:42.376881306Z 73 PC: 12e6b | Release memory
2018-12-17T22:44:42.379040464Z 53 PC: 12e70 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:44:42.382262374Z 53 PC: 12e7d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:42.384859495Z 37 PC: 12ea2 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:44:42.38697046Z 37 PC: 12eaa | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:42.393217338Z 49 PC: 12eb2 | Terminate and stay resident (Return code = '0' | Memory size = '54')