Sample viewer

vx.netlux.org/Virus.DOS.Spooky.381

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:10:57.362513757Z 47 PC: 12c3a | Get disk transfer address
2018-12-17T23:10:57.369411327Z 26 PC: 12c46 | Set disk transfer address
2018-12-17T23:10:57.370527619Z 78 PC: 12c5e | Find first file
2018-12-17T23:10:57.376325942Z 61 PC: 12c6c | Open file (Filename = 'TEST.EXE')
2018-12-17T23:10:57.383324274Z 63 PC: 12c79 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:10:57.386431767Z 62 PC: 12d3b | Close file
2018-12-17T23:10:57.388268082Z 79 PC: 12c5e | Find next file
2018-12-17T23:10:57.390959663Z 26 PC: 12d46 | Set disk transfer address
2018-12-17T23:10:57.392312427Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T23:10:57.39617805Z 76 PC: 12a86 | Terminate with return code (Return code = '36')