Sample viewer

vx.netlux.org/Virus.DOS.Piggy.709

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:51:38.211801476Z 53 PC: 14668 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T21:51:38.214488784Z 37 PC: 14677 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T21:51:38.215914421Z 26 PC: 14680 | Set disk transfer address
2018-12-17T21:51:38.217199234Z 71 PC: 14689 | Get current directory
2018-12-17T21:51:38.221039866Z 78 PC: 146f3 | Find first file
2018-12-17T21:51:38.227303678Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.23008919Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.233142492Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.236094605Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.238647223Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.241045607Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.2477606Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.250251771Z 67 PC: 14718 | Get or set file attributes
2018-12-17T21:51:38.267122415Z 61 PC: 14721 | Open file (Filename = ':\wina20.386')
2018-12-17T21:51:38.277455927Z 63 PC: 14730 | Read file or device (Read 6 bytes on handle 5)
2018-12-17T21:51:38.280120399Z 62 PC: 1482d | Close file
2018-12-17T21:51:38.281926546Z 67 PC: 1483b | Get or set file attributes
2018-12-17T21:51:38.295588191Z 79 PC: 14844 | Find next file
2018-12-17T21:51:38.297993695Z 59 PC: 146d3 | Change current directory
2018-12-17T21:51:38.302437588Z 59 PC: 146e5 | Change current directory
2018-12-17T21:51:38.305276259Z 48 PC: 12d21 | Get DOS version
2018-12-17T21:51:38.306811816Z 64 PC: 13c7f | Write file or device (Write 134 bytes on handle 1)
2018-12-17T21:51:38.315529585Z 64 PC: 13c7f | Write file or device (Write 868 bytes on handle 1)
2018-12-17T21:51:38.346678018Z 76 PC: 12d1d | Terminate with return code (Return code = '0')