Sample viewer

vx.netlux.org/Virus.DOS.DieHard2.4000.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:12:08.393297381Z 51 PC: 14099 | Get or set Ctrl-Break
2018-12-17T23:12:08.396146816Z 43 PC: 13f49 | Set date
2018-12-17T23:12:08.397496538Z 53 PC: 13f52 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T23:12:08.399806835Z 48 PC: 13fee | Get DOS version
2018-12-17T23:12:08.402816568Z 47 PC: 134e1 | Get disk transfer address
2018-12-17T23:12:08.404090614Z 26 PC: 134e1 | Set disk transfer address
2018-12-17T23:12:08.405112301Z 78 PC: 134e1 | Find first file
2018-12-17T23:12:08.411491591Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T23:12:08.521097685Z 61 PC: 134e1 | Open file (Filename = 'A:\TEST.COM')
2018-12-17T23:12:08.527759217Z 63 PC: 134e1 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T23:12:08.53135526Z 66 PC: 134e1 | Move file pointer
2018-12-17T23:12:08.532698933Z 63 PC: 134e1 | Read file or device (Read 54 bytes on handle 5)
2018-12-17T23:12:08.539798731Z 64 PC: 134e1 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:12:08.542520037Z 87 PC: 134e1 | Get or set file date and time
2018-12-17T23:12:08.552013899Z 62 PC: 134e1 | Close file
2018-12-17T23:12:08.747403409Z 67 PC: 134e1 | Get or set file attributes
2018-12-17T23:12:08.854358377Z 26 PC: 134e1 | Set disk transfer address
2018-12-17T23:12:08.857836494Z 48 PC: 12ed9 | Get DOS version
2018-12-17T23:12:08.859593752Z 9 PC: 12ee5 | Display string (String= ' Incorrect DOS version ')
2018-12-17T23:12:08.865120768Z 76 PC: 130fa | Terminate with return code (Return code = '1')