Sample viewer

vx.netlux.org/Virus.DOS.Cpw.1459

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:54.947836327Z 73 PC: 12c85 | Release memory
2018-12-17T21:59:54.953798337Z 72 PC: 12c8c | Allocate memory
2018-12-17T21:59:54.96907018Z 74 PC: 12c9a | Reallocate memory
2018-12-17T21:59:54.970449334Z 74 PC: 12ca9 | Reallocate memory
2018-12-17T21:59:54.97288392Z 53 PC: 12cd3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:59:54.974176871Z 53 PC: 12cf2 | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1103,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:52.043374803Z 73 PC: 12c85 | Release memory
2018-12-25T11:42:52.044981099Z 72 PC: 12c8c | Allocate memory
2018-12-25T11:42:52.046518867Z 74 PC: 12c9a | Reallocate memory
2018-12-25T11:42:52.047696151Z 74 PC: 12ca9 | Reallocate memory
2018-12-25T11:42:52.049343737Z 53 PC: 12cd3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:42:52.050550853Z 53 PC: 12cf2 | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')

{"DateBased":true,"Day":27,"Month":5,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":1103,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:42:52.158525312Z 73 PC: 12c85 | Release memory
2018-12-25T11:42:52.160538701Z 72 PC: 12c8c | Allocate memory
2018-12-25T11:42:52.163404618Z 74 PC: 12c9a | Reallocate memory
2018-12-25T11:42:52.165136709Z 74 PC: 12ca9 | Reallocate memory
2018-12-25T11:42:52.16731985Z 53 PC: 12cd3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:42:52.168567133Z 53 PC: 12cf2 | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')