Sample viewer

vx.netlux.org/Virus.DOS.CRLC.554

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:08.035055267Z 26 PC: 15a21 | Set disk transfer address
2018-12-17T22:47:08.036968492Z 53 PC: 15a37 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:08.038237263Z 37 PC: 15a47 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:08.039408042Z 78 PC: 15a51 | Find first file
2018-12-17T22:47:08.046388908Z 61 PC: 15a74 | Open file (Filename = '')
2018-12-17T22:47:08.052768701Z 63 PC: 15a82 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:47:08.055351157Z 66 PC: 15aa8 | Move file pointer
2018-12-17T22:47:08.057571223Z 63 PC: 15ab4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:47:08.060458543Z 62 PC: 15b63 | Close file
2018-12-17T22:47:08.062196816Z 79 PC: 15b84 | Find next file
2018-12-17T22:47:08.065048463Z 37 PC: 15b92 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:08.066597197Z 26 PC: 15b9a | Set disk transfer address
2018-12-17T22:47:08.068173482Z 74 PC: 12aee | Reallocate memory
2018-12-17T22:47:08.07128646Z 74 PC: 12aee | Reallocate memory
2018-12-17T22:47:08.073815629Z 74 PC: 12aee | Reallocate memory
2018-12-17T22:47:08.07557397Z 53 PC: 13edb | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:08.0775624Z 37 PC: 13ef2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:08.080322661Z 74 PC: 12aee | Reallocate memory
2018-12-17T22:47:08.082425594Z 68 PC: 1501f | I/O control for devices (Set for = '� ��')
2018-12-17T22:47:08.084344363Z 74 PC: 12aee | Reallocate memory
2018-12-17T22:47:08.087383598Z 66 PC: 14c17 | Move file pointer
2018-12-17T22:47:08.089308049Z 63 PC: 14d55 | Read file or device (Read 895 bytes on handle 0)