Sample viewer

vx.netlux.org/Virus.DOS.HelloUser.376.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:37.198933977Z 26 PC: 13e70 | Set disk transfer address
2018-12-17T21:59:37.201557727Z 25 PC: 13e81 | Get default drive
2018-12-17T21:59:37.203083599Z 14 PC: 13e8b | Set default drive (Drive = 'C')
2018-12-17T21:59:37.204733222Z 78 PC: 13e95 | Find first file
2018-12-17T21:59:37.21260899Z 61 PC: 13ea2 | Open file (Filename = 'COMMAND.COM')
2018-12-17T21:59:37.219028012Z 66 PC: 13f72 | Move file pointer
2018-12-17T21:59:37.220772261Z 62 PC: 13ec9 | Close file
2018-12-17T21:59:37.223105675Z 79 PC: 13e95 | Find next file
2018-12-17T21:59:37.227207238Z 26 PC: 13f5f | Set disk transfer address
2018-12-17T21:59:37.228635238Z 14 PC: 13f67 | Set default drive (Drive = 'A')
2018-12-17T21:59:37.230261284Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ')
2018-12-17T21:59:37.237580086Z 0 PC: 12a89 | Program terminate