Sample viewer

vx.netlux.org/Virus.DOS.Retribution

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:20.070821477Z 48 PC: 12a7c | Get DOS version
2018-12-17T22:47:20.075969532Z 53 PC: 12a9e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:20.077241554Z 37 PC: 12ab0 | Set interrupt vector (Interrupt = '225' AKA 'UNKNOWN!')
2018-12-17T22:47:20.078439799Z 53 PC: 12ab7 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:47:20.080008872Z 53 PC: 12ac4 | Get interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:47:20.081158256Z 37 PC: 12ad5 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:47:20.082139315Z 37 PC: 12ade | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:47:20.083732743Z 74 PC: 12ae7 | Reallocate memory
2018-12-17T22:47:20.085140335Z 75 PC: 12b16 | Execute program
2018-12-17T22:47:20.100695182Z 48 PC: 13a2c | Get DOS version
2018-12-17T22:47:20.102598695Z 9 PC: 13a32 | Display string (String= 'Goat file (COM). Size=00002710h/0000010000d bytes. ')
2018-12-17T22:47:20.107503506Z 76 PC: 13a36 | Terminate with return code (Return code = '36')