.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:48:20.385238223Z | 243 | PC: 12bb3 | UNKNOWN! |
| 2018-12-17T22:48:20.390536738Z | 53 | PC: 12bbd | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:48:20.392433582Z | 37 | PC: 12c0b | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:48:20.394286744Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:48:20.39690299Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:48:20.407288976Z | 53 | PC: 9f867 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:48:20.408781079Z | 61 | PC: 9f876 | Open file (Filename = '') |
| 2018-12-17T22:48:20.4184778Z | 63 | PC: 9f888 | Read file or device (Read 517 bytes on handle 5) |
| 2018-12-17T22:48:20.42680701Z | 62 | PC: 9f8dd | Close file |
| 2018-12-17T22:48:20.429488619Z | 37 | PC: 9f8ed | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:48:20.431330229Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:48:20.439657445Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:48:20.442576741Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:48:20.445045109Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0205h/00517d. Virus might be activ? ') |
| 2018-12-17T22:48:20.451776588Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |