Sample viewer

vx.netlux.org/Virus.DOS.Nelson.226

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:48.463297947Z 59 PC: 12a47 | Change current directory
2018-12-17T22:56:48.467962504Z 78 PC: 12a50 | Find first file
2018-12-17T22:56:48.474385731Z 61 PC: 12a5a | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:56:48.480733796Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.488228084Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.491155446Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.504615924Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.507968545Z 61 PC: 12a5a | Open file (Filename = 'PRINT.COM')
2018-12-17T22:56:48.514381457Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.520919109Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.523465771Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.531669969Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.534387751Z 61 PC: 12a5a | Open file (Filename = 'HELLO.COM')
2018-12-17T22:56:48.541288053Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.555269517Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.56378568Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.573883242Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.577792774Z 61 PC: 12a5a | Open file (Filename = 'PHANG.COM')
2018-12-17T22:56:48.58450071Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.59278753Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.596503576Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.604974026Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.608749038Z 61 PC: 12a5a | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:56:48.620410774Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.627821818Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.630817816Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.639814559Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.643236998Z 61 PC: 12a5a | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:56:48.649996101Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.658009915Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.661028032Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.668533452Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.671983357Z 61 PC: 12a5a | Open file (Filename = 'PAH.COM')
2018-12-17T22:56:48.679470407Z 64 PC: 12a6c | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.685237778Z 64 PC: 12a7d | Write file or device (Write 113 bytes on handle 5)
2018-12-17T22:56:48.687068381Z 62 PC: 12a81 | Close file
2018-12-17T22:56:48.704009428Z 79 PC: 12a50 | Find next file
2018-12-17T22:56:48.706642708Z 9 PC: 12a8c | Display string (String= '[HALF NELSON VIRUS] ')