Sample viewer

vx.netlux.org/Virus.DOS.Clone-based

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:27.923361617Z 78 PC: 12a9e | Find first file
2018-12-17T23:02:27.93068993Z 61 PC: 12aa8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:02:27.936474324Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:27.940864276Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:27.942948103Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:27.958356638Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:27.961286804Z 61 PC: 12aa8 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:02:27.967839597Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:27.974968068Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:27.977754539Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:27.985432249Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:27.988584112Z 61 PC: 12aa8 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:02:27.995625495Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:28.001978651Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:28.004913724Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:28.012467711Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:28.01491019Z 61 PC: 12aa8 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:02:28.021934767Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:28.028533188Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:28.031225226Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:28.040048029Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:28.042574686Z 61 PC: 12aa8 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:02:28.048858267Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:28.056385072Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:28.059020441Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:28.066577662Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:28.069663942Z 61 PC: 12aa8 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:02:28.076237533Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:28.082847988Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:28.086181129Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:28.093733798Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:28.096236654Z 61 PC: 12aa8 | Open file (Filename = 'PAH.COM')
2018-12-17T23:02:28.103254942Z 64 PC: 12ab4 | Write file or device (Write 44 bytes on handle 5)
2018-12-17T23:02:28.109976298Z 64 PC: 12abd | Write file or device (Write 156 bytes on handle 5)
2018-12-17T23:02:28.112711261Z 62 PC: 12ac1 | Close file
2018-12-17T23:02:28.121014834Z 79 PC: 12a9e | Find next file
2018-12-17T23:02:28.123746021Z 9 PC: 12acf | Display string (String= ' -=[ BIRGIT BITTE VERZEIH MIR ! ]=- ')