Sample viewer

vx.netlux.org/Virus.DOS.Timid.299

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:57.605943238Z 26 PC: 12a86 | Set disk transfer address
2018-12-17T23:06:57.607636Z 78 PC: 12acd | Find first file
2018-12-17T23:06:57.615405236Z 61 PC: 12ae5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:06:57.622986669Z 63 PC: 12af4 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T23:06:57.630249942Z 62 PC: 12af9 | Close file
2018-12-17T23:06:57.633242448Z 61 PC: 12b20 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:06:57.640534677Z 66 PC: 12b30 | Move file pointer
2018-12-17T23:06:57.642113726Z 64 PC: 12b3f | Write file or device (Write 299 bytes on handle 5)
2018-12-17T23:06:57.659057118Z 66 PC: 12b51 | Move file pointer
2018-12-17T23:06:57.661311877Z 64 PC: 12b5f | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:06:57.668984702Z 66 PC: 12b6c | Move file pointer
2018-12-17T23:06:57.671703612Z 64 PC: 12b92 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:06:57.675752544Z 62 PC: 12b9a | Close file
2018-12-17T23:06:57.684897747Z 9 PC: 12a96 | Display string (Could not find end pointer)
2018-12-17T23:06:57.730527657Z 26 PC: 12a9d | Set disk transfer address
2018-12-17T23:06:57.731888245Z 53 PC: 12a59 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:57.733085716Z 37 PC: 12a6b | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:57.734266286Z 49 PC: 12a70 | Terminate and stay resident (Return code = '0' | Memory size = '18')