Sample viewer

vx.netlux.org/Virus.DOS.HLLO.Wonder

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:51:27.609955147Z 48 PC: 12a4c | Get DOS version
2018-12-17T21:51:27.611865433Z 53 PC: 12bef | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:27.61298031Z 53 PC: 12bfc | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T21:51:27.614088737Z 53 PC: 12c09 | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T21:51:27.616172708Z 53 PC: 12c16 | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T21:51:27.6176968Z 37 PC: 12c2a | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:27.618928331Z 74 PC: 12af4 | Reallocate memory
2018-12-17T21:51:27.621165393Z 68 PC: 12f7b | I/O control for devices (Set for = 'pyright 1991 Borland Intl.')
2018-12-17T21:51:27.623489322Z 68 PC: 12f7b | I/O control for devices (Set for = '')
2018-12-17T21:51:27.633523817Z 67 PC: 13622 | Get or set file attributes
2018-12-17T21:51:27.639395916Z 61 PC: 13f7c | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T21:51:27.64757292Z 68 PC: 13274 | I/O control for devices (Set for = '��')
2018-12-17T21:51:27.649358392Z 68 PC: 12f7b | I/O control for devices
2018-12-17T21:51:27.653550464Z 63 PC: 130fa | Read file or device (Read 7168 bytes on handle 5)
2018-12-17T21:51:27.66245424Z 63 PC: 130fa | Read file or device (Read 512 bytes on handle 5)
2018-12-17T21:51:27.669887644Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.671761207Z 47 PC: 137e2 | Get disk transfer address
2018-12-17T21:51:27.677791314Z 26 PC: 137eb | Set disk transfer address
2018-12-17T21:51:27.679105209Z 78 PC: 137f5 | Find first file
2018-12-17T21:51:27.684854673Z 26 PC: 137fe | Set disk transfer address
2018-12-17T21:51:27.687042782Z 67 PC: 13622 | Get or set file attributes
2018-12-17T21:51:27.692620784Z 61 PC: 13f7c | Open file (Filename = '')
2018-12-17T21:51:27.699147739Z 68 PC: 13274 | I/O control for devices (Set for = '')
2018-12-17T21:51:27.701376975Z 68 PC: 12f7b | I/O control for devices
2018-12-17T21:51:27.703715227Z 63 PC: 130fa | Read file or device (Read 7168 bytes on handle 5)
2018-12-17T21:51:27.714828623Z 63 PC: 130fa | Read file or device (Read 512 bytes on handle 5)
2018-12-17T21:51:27.721818446Z 47 PC: 13815 | Get disk transfer address
2018-12-17T21:51:27.729416695Z 26 PC: 1381e | Set disk transfer address
2018-12-17T21:51:27.730459619Z 79 PC: 13822 | Find next file
2018-12-17T21:51:27.732735375Z 26 PC: 1382b | Set disk transfer address
2018-12-17T21:51:27.734487177Z 37 PC: 12c36 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T21:51:27.735704645Z 37 PC: 12c41 | Set interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T21:51:27.736905688Z 37 PC: 12c4c | Set interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T21:51:27.738679637Z 37 PC: 12c57 | Set interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T21:51:27.74013047Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.742024839Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.744501665Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.747217881Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.749096136Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.752030526Z 62 PC: 1365d | Close file
2018-12-17T21:51:27.754965463Z 76 PC: 12be0 | Terminate with return code (Return code = '0')