Sample viewer

vx.netlux.org/Virus.DOS.Search.350

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:09:14.921017367Z 78 PC: 12ab2 | Find first file
2018-12-17T23:09:14.928352241Z 61 PC: 12acd | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:09:14.93603251Z 66 PC: 12ae1 | Move file pointer
2018-12-17T23:09:14.938665123Z 63 PC: 12af4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:09:14.945896345Z 66 PC: 12b24 | Move file pointer
2018-12-17T23:09:14.948474889Z 63 PC: 12b37 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:09:14.951678799Z 66 PC: 12b4f | Move file pointer
2018-12-17T23:09:14.953826455Z 64 PC: 12b80 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:09:14.958228398Z 66 PC: 12b8e | Move file pointer
2018-12-17T23:09:14.960561309Z 64 PC: 12bac | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:09:14.964205741Z 64 PC: 12bba | Write file or device (Write 350 bytes on handle 5)
2018-12-17T23:09:14.981374256Z 62 PC: 12bbf | Close file
2018-12-17T23:09:14.990390423Z 64 PC: 12a4e | Write file or device (Write 39 bytes on handle 1)
2018-12-17T23:09:14.995833521Z 76 PC: 12a52 | Terminate with return code (Return code = '39')