Sample viewer

vx.netlux.org/Virus.DOS.Khizhnjak.510

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:58:45.934291455Z 78 PC: 12bd8 | Find first file
2018-12-17T22:58:45.94074361Z 67 PC: 12c22 | Get or set file attributes
2018-12-17T22:58:45.988198363Z 61 PC: 12c2f | Open file (Filename = '~')
2018-12-17T22:58:46.000323001Z 63 PC: 12c45 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:58:46.007352231Z 66 PC: 12c5a | Move file pointer
2018-12-17T22:58:46.009210989Z 66 PC: 12c94 | Move file pointer
2018-12-17T22:58:46.0107811Z 63 PC: 12ca7 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:58:46.013568323Z 66 PC: 12cd3 | Move file pointer
2018-12-17T22:58:46.015408328Z 64 PC: 12ce4 | Write file or device (Write 510 bytes on handle 5)
2018-12-17T22:58:46.023407616Z 66 PC: 12cf6 | Move file pointer
2018-12-17T22:58:46.025411976Z 64 PC: 12d06 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:58:46.032838383Z 62 PC: 12d17 | Close file
2018-12-17T22:58:46.041043215Z 9 PC: 12a82 | Display string (String= 'FS3C[rt<u6> u2J6S[rW&EtP&/Xs6P')
2018-12-17T22:58:46.045444593Z 76 PC: 12a86 | Terminate with return code (Return code = '36')