Sample viewer

vx.netlux.org/Virus.DOS.Nanjing.2976.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:48:15.04701537Z 255 PC: 17d03 | UNKNOWN!
2018-12-17T22:48:15.048484909Z 37 PC: 1341d | Set interrupt vector (Interrupt = '74' AKA 'Reallocate memory')
2018-12-17T22:48:15.049546224Z 37 PC: 13427 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:48:15.050518764Z 53 PC: 1342c | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:15.051981914Z 37 PC: 13440 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:48:15.053416346Z 74 PC: 13450 | Reallocate memory
2018-12-17T22:48:15.055178757Z 75 PC: 13498 | Execute program
2018-12-17T22:48:15.072209933Z 9 PC: 13747 | Display string (String= 'This GOAT file was generated by Andreas Marx. ROSEGOAT by RR! (31.05.1998) File: ROSE002.EXE - 19.250 (4B32h) bytes length! ')
2018-12-17T22:48:15.080708139Z 77 PC: 134ac | Get program return code
2018-12-17T22:48:15.08172401Z 49 PC: 134b7 | Terminate and stay resident (Return code = '0' | Memory size = '202')