Sample viewer

vx.netlux.org/Virus.DOS.Anti-AVP.959

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:18.601643888Z 47 PC: 12ab9 | Get disk transfer address
2018-12-17T23:02:18.603233169Z 26 PC: 12ac3 | Set disk transfer address
2018-12-17T23:02:18.60436434Z 78 PC: 12acd | Find first file
2018-12-17T23:02:18.610159043Z 61 PC: 12b54 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:02:18.617414559Z 63 PC: 12b62 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T23:02:18.623656438Z 66 PC: 12b7e | Move file pointer
2018-12-17T23:02:18.625321986Z 64 PC: 12b87 | Write file or device (Write 959 bytes on handle 5)
2018-12-17T23:02:18.640900727Z 66 PC: 12b8f | Move file pointer
2018-12-17T23:02:18.642358947Z 64 PC: 12ba5 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T23:02:18.648484372Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T23:02:18.65039196Z 62 PC: 12bb6 | Close file
2018-12-17T23:02:18.657984017Z 61 PC: 12b54 | Open file (Filename = 'c:\DoS\fORmaT.cOM')
2018-12-17T23:02:18.667855631Z 63 PC: 12b62 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T23:02:18.673537188Z 66 PC: 12b7e | Move file pointer
2018-12-17T23:02:18.675702023Z 64 PC: 12b87 | Write file or device (Write 959 bytes on handle 5)
2018-12-17T23:02:19.01802183Z 66 PC: 12b8f | Move file pointer
2018-12-17T23:02:19.019586429Z 64 PC: 12ba5 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T23:02:19.023466196Z 87 PC: 12bb2 | Get or set file date and time
2018-12-17T23:02:19.02480101Z 62 PC: 12bb6 | Close file
2018-12-17T23:02:19.039108306Z 61 PC: 12ae6 | Open file (Filename = 'AVp.SeT')
2018-12-17T23:02:19.046265701Z 26 PC: 12b4a | Set disk transfer address
2018-12-17T23:02:19.047708928Z 76 PC: 12a45 | Terminate with return code (Return code = '0')