Sample viewer

vx.netlux.org/Virus.DOS.Smm.Demo.2157

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:54:21.71040415Z 26 PC: 229a9 | Set disk transfer address
2018-12-17T22:54:21.712878106Z 78 PC: 229b2 | Find first file
2018-12-17T22:54:21.720026013Z 61 PC: 229be | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:54:21.72754672Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:21.737327362Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:21.743288439Z 64 PC: 229f1 | Write file or device (Write 2494 bytes on handle 5)
2018-12-17T22:54:21.757357776Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:21.759076365Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:21.767742413Z 62 PC: 22a0e | Close file
2018-12-17T22:54:21.776579092Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:21.779561454Z 61 PC: 229be | Open file (Filename = 'PRINT.COM')
2018-12-17T22:54:21.787099012Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:21.796262214Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:21.806255355Z 64 PC: 229f1 | Write file or device (Write 2648 bytes on handle 5)
2018-12-17T22:54:21.817768852Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:21.819763288Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:21.827404492Z 62 PC: 22a0e | Close file
2018-12-17T22:54:21.838412579Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:21.84207047Z 61 PC: 229be | Open file (Filename = 'HELLO.COM')
2018-12-17T22:54:21.849603199Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:21.857022395Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:21.867319858Z 64 PC: 229f1 | Write file or device (Write 2624 bytes on handle 5)
2018-12-17T22:54:21.879700714Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:21.881887301Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:21.890664568Z 62 PC: 22a0e | Close file
2018-12-17T22:54:21.900804786Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:21.904264344Z 61 PC: 229be | Open file (Filename = 'PHANG.COM')
2018-12-17T22:54:21.912187336Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:21.919834331Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:21.927497324Z 64 PC: 229f1 | Write file or device (Write 2392 bytes on handle 5)
2018-12-17T22:54:21.936828292Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:21.939284876Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:21.947174486Z 62 PC: 22a0e | Close file
2018-12-17T22:54:21.956249152Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:21.962692294Z 61 PC: 229be | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:54:21.970050857Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:21.977379913Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:21.992684862Z 64 PC: 229f1 | Write file or device (Write 2768 bytes on handle 5)
2018-12-17T22:54:22.002645752Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:22.007307489Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:22.015640111Z 62 PC: 22a0e | Close file
2018-12-17T22:54:22.026142999Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:22.02925267Z 61 PC: 229be | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:54:22.037292162Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:22.044699335Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:22.055683718Z 64 PC: 229f1 | Write file or device (Write 2908 bytes on handle 5)
2018-12-17T22:54:22.065745949Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:22.068895504Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:22.07613844Z 62 PC: 22a0e | Close file
2018-12-17T22:54:22.085217173Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:22.090383287Z 61 PC: 229be | Open file (Filename = 'PAH.COM')
2018-12-17T22:54:22.09766227Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:22.105111251Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:22.114796394Z 64 PC: 229f1 | Write file or device (Write 2619 bytes on handle 5)
2018-12-17T22:54:22.124272304Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:22.126052688Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:22.134228956Z 62 PC: 22a0e | Close file
2018-12-17T22:54:22.143224053Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:22.146251028Z 61 PC: 229be | Open file (Filename = 'TEST.COM')
2018-12-17T22:54:22.154400216Z 63 PC: 229cd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:54:22.157879421Z 66 PC: 229de | Move file pointer
2018-12-17T22:54:22.166537224Z 64 PC: 229f1 | Write file or device (Write 2628 bytes on handle 5)
2018-12-17T22:54:22.176106639Z 66 PC: 229f9 | Move file pointer
2018-12-17T22:54:22.17915274Z 64 PC: 22a0a | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:54:22.182667983Z 62 PC: 22a0e | Close file
2018-12-17T22:54:22.191979594Z 79 PC: 229b2 | Find next file
2018-12-17T22:54:22.196533027Z 9 PC: 22a25 | Display string (String= 'SmallMutationEngine32 ViRUS Demo. ')