Sample viewer

vx.netlux.org/Virus.DOS.Chapa.448

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:15.510452123Z 53 PC: 12b98 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:15.51304543Z 37 PC: 12bba | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:15.514653601Z 53 PC: 12bbf | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:46:15.516049804Z 37 PC: 12bcf | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:46:15.518154138Z 48 PC: 12a63 | Get DOS version
2018-12-17T22:46:15.519270521Z 9 PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ')
2018-12-17T22:46:15.52798251Z 61 PC: 12cb7 | Open file (Filename = '')
2018-12-17T22:46:15.533480481Z 9 PC: 12a88 | Display string (String= 'Self test: ')
2018-12-17T22:46:15.535809445Z 93 PC: 12b24 | File sharing functions
2018-12-17T22:46:15.537310358Z 9 PC: 12b03 | Display string (String= 'Size change=+01C0h/00448d. Virus might be activ? ')
2018-12-17T22:46:15.541667832Z 76 PC: 12b09 | Terminate with return code (Return code = '1')