Sample viewer

vx.netlux.org/Virus.DOS.LG.c

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:21.163415416Z 53 PC: 12e36 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:21.164786091Z 37 PC: 12e40 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:46:21.166445254Z 53 PC: 12e36 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:46:21.167986601Z 37 PC: 12e40 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:46:21.169452069Z 37 PC: 12b99 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:46:21.171805635Z 9 PC: 12a4f | Display string (String= 'FRODO LIVES!')
2018-12-17T22:46:21.17426171Z 76 PC: 12a54 | Terminate with return code (Return code = '0')
2018-12-17T22:46:21.177645038Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:46:21.179580248Z 72 PC: 12174 | Allocate memory
2018-12-17T22:46:21.181480868Z 72 PC: 1218d | Allocate memory
2018-12-17T22:46:21.183917759Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:46:21.192598874Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:21.195098894Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.197579986Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.200417942Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.204405687Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.207875556Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.210048841Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.213409306Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.2152048Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.216869677Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.219824085Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.221343687Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.223122095Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.228797582Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.231067702Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.233128281Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.235748489Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.237570105Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.23947269Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.240890107Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.243105294Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.244652368Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.246626616Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.249399708Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.251136168Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.252337745Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.255051142Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.256760925Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.258918264Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.261433346Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.264441856Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.267211417Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.270426586Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.273112473Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.276071446Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.278089779Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.280321526Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.282076143Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.285428723Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.287711768Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.289970048Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.292634519Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.294895315Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.296641481Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.299211743Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.30076042Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.302491832Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.303970618Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.306484744Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.308340611Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.310610938Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.320132794Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.322240407Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.323895505Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.327065913Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.328431643Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.330105473Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.332818635Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.334542966Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.335804204Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.337925871Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:21.339348576Z 62 PC: 122ab | Close file
2018-12-17T22:46:21.342772874Z 99 PC: 995d7 | Get DBCS lead byte table pointer
2018-12-17T22:46:21.345284159Z 56 PC: 93df9 | Get or set country info
2018-12-17T22:46:21.347440874Z 64 PC: 99848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:46:21.353367955Z 25 PC: 93e62 | Get default drive
2018-12-17T22:46:21.35568834Z 71 PC: 960dd | Get current directory
2018-12-17T22:46:21.360465017Z 64 PC: 99848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:46:21.364726796Z 2 PC: 960b2 | Character output (Char = '3e')
2018-12-17T22:46:21.368147344Z 93 PC: 93f20 | File sharing functions
2018-12-17T22:46:21.370371091Z 93 PC: 93f27 | File sharing functions
2018-12-17T22:46:21.373120957Z 10 PC: 93f39 | Buffered keyboard input
2018-12-17T22:46:36.145409448Z 0 PC: 0 | Program terminate
2018-12-17T22:46:37.500554206Z 0 PC: 0 | Program terminate
2018-12-17T22:46:37.603344483Z 64 PC: 99848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:46:37.610900891Z 41 PC: 93fae | Parse filename
2018-12-17T22:46:37.613079766Z 41 PC: 9402f | Parse filename
2018-12-17T22:46:37.614885412Z 41 PC: 9404c | Parse filename
2018-12-17T22:46:37.620156077Z 26 PC: 974f7 | Set disk transfer address
2018-12-17T22:46:37.627440779Z 71 PC: 976f3 | Get current directory
2018-12-17T22:46:37.636748673Z 78 PC: 976fe | Find first file
2018-12-17T22:46:37.648254064Z 71 PC: 9756c | Get current directory
2018-12-17T22:46:37.651858147Z 73 PC: 96c09 | Release memory
2018-12-17T22:46:37.653584712Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.655877681Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.657654713Z 61 PC: 9edcf | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:46:37.664939553Z 63 PC: 9ede4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:46:37.698114208Z 64 PC: 9ee12 | Write file or device (Write 146 bytes on handle 5)
2018-12-17T22:46:37.702229417Z 64 PC: 9ee26 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:46:37.705217796Z 87 PC: 9ed6d | Get or set file date and time
2018-12-17T22:46:37.707039173Z 62 PC: 9ed79 | Close file
2018-12-17T22:46:37.71612223Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.7173647Z 75 PC: 11821 | Execute program
2018-12-17T22:46:37.730322536Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T22:46:37.735682564Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-17T22:46:37.740003873Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:46:37.753086914Z 72 PC: 12174 | Allocate memory
2018-12-17T22:46:37.756747617Z 72 PC: 1218d | Allocate memory
2018-12-17T22:46:37.761075195Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:46:37.762781263Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:46:37.765655229Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.767457281Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.769177357Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.771413587Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.773764738Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.776613996Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.778274814Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.781100033Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.783480161Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.785644009Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.788239902Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.790355325Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.791422872Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.793607009Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.794762068Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.796059573Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.797634604Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.799056679Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.800130363Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.802244975Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.803640262Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.805144655Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.80776594Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.810218971Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.81218683Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.815639631Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.817665205Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.820111057Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.823223056Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.825725205Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.82777185Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.829404267Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.831246767Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.833026295Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.834212793Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.835675999Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.836656614Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.83808154Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.839592759Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.841117459Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.842755829Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.845120537Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.846517684Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.848231052Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.849745112Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.851552189Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.852958464Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.85492042Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.856001225Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.857780794Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.859110865Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.860786371Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.862273748Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.865344142Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.866873279Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.868714565Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.870021928Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.871827454Z 53 PC: 9efd5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.873220463Z 37 PC: 9efdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.876216238Z 37 PC: 9ed83 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:37.87756596Z 62 PC: 122ab | Close file
2018-12-17T22:46:37.881101809Z 99 PC: 995d7 | Get DBCS lead byte table pointer
2018-12-17T22:46:37.882763242Z 56 PC: 93df9 | Get or set country info
2018-12-17T22:46:37.885339248Z 64 PC: 99848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:46:37.890879405Z 25 PC: 93e62 | Get default drive
2018-12-17T22:46:37.893298739Z 71 PC: 960dd | Get current directory
2018-12-17T22:46:37.897686673Z 64 PC: 99848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:46:37.904894028Z 2 PC: 960b2 | Character output (Char = '3e')
2018-12-17T22:46:37.908275639Z 93 PC: 93f20 | File sharing functions
2018-12-17T22:46:37.910490499Z 93 PC: 93f27 | File sharing functions
2018-12-17T22:46:37.912583868Z 10 PC: 93f39 | Buffered keyboard input