Sample viewer

vx.netlux.org/Virus.DOS.Nomad.1350

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:35.937880164Z 25 PC: 12aef | Get default drive
2018-12-17T21:59:35.940395176Z 71 PC: 12b02 | Get current directory
2018-12-17T21:59:35.943461427Z 26 PC: 12b0a | Set disk transfer address
2018-12-17T21:59:35.944865089Z 78 PC: 12b48 | Find first file
2018-12-17T21:59:35.958659591Z 61 PC: 12b66 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:59:35.970146175Z 63 PC: 12b75 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:35.97653272Z 62 PC: 12b79 | Close file
2018-12-17T21:59:35.979547615Z 67 PC: 12b90 | Get or set file attributes
2018-12-17T21:59:35.999031176Z 61 PC: 12b9e | Open file (Filename = 'TEST.EXE')
2018-12-17T21:59:36.005411937Z 63 PC: 12bae | Read file or device (Read 28 bytes on handle 5)
2018-12-17T21:59:36.013117526Z 66 PC: 12bde | Move file pointer
2018-12-17T21:59:36.01548718Z 64 PC: 12be9 | Write file or device (Write 1350 bytes on handle 5)
2018-12-17T21:59:36.024633072Z 66 PC: 12c32 | Move file pointer
2018-12-17T21:59:36.026504413Z 66 PC: 12c4a | Move file pointer
2018-12-17T21:59:36.031345339Z 64 PC: 12c55 | Write file or device (Write 28 bytes on handle 5)
2018-12-17T21:59:36.034348915Z 87 PC: 12c6a | Get or set file date and time
2018-12-17T21:59:36.036066142Z 62 PC: 12c6e | Close file
2018-12-17T21:59:36.044391588Z 67 PC: 12c7e | Get or set file attributes
2018-12-17T21:59:36.054044241Z 59 PC: 12cdc | Change current directory
2018-12-17T21:59:36.058271048Z 78 PC: 12b48 | Find first file
2018-12-17T21:59:36.06539709Z 79 PC: 12b51 | Find next file
2018-12-17T21:59:36.068224049Z 59 PC: 12cdc | Change current directory
2018-12-17T21:59:36.069941838Z 78 PC: 12b48 | Find first file
2018-12-17T21:59:36.076308406Z 79 PC: 12b51 | Find next file
2018-12-17T21:59:36.078583722Z 59 PC: 12cdc | Change current directory
2018-12-17T21:59:36.080222479Z 78 PC: 12b48 | Find first file
2018-12-17T21:59:36.087542444Z 79 PC: 12b51 | Find next file
2018-12-17T21:59:36.089672245Z 59 PC: 12cdc | Change current directory
2018-12-17T21:59:36.091207759Z 78 PC: 12b48 | Find first file
2018-12-17T21:59:36.097624541Z 79 PC: 12b51 | Find next file
2018-12-17T21:59:36.109909138Z 9 PC: 12cd7 | Display string (String= ' ******************************************************* * yO!!! I could have made some mischief to you but I * * lEfT it out. I'm the #Nomad Virus# - Mikee's World * ******************************************************* ')
2018-12-17T21:59:36.122449408Z 59 PC: 12cb2 | Change current directory
2018-12-17T21:59:36.126920269Z 26 PC: 12cc2 | Set disk transfer address
2018-12-17T21:59:36.128014738Z 9 PC: 12f8f | Display string (Could not find end pointer)
2018-12-17T21:59:36.141934091Z 76 PC: 12f93 | Terminate with return code (Return code = '36')