Sample viewer

vx.netlux.org/Virus.DOS.Hail.327

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:12:27.42511082Z 78 PC: 12aed | Find first file
2018-12-17T23:12:27.431728394Z 61 PC: 12af8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:12:27.439375683Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.44852091Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.450549024Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.454736268Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.456906458Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.472578899Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.482855933Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.486169033Z 61 PC: 12af8 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:12:27.494540185Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.502164962Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.504308573Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.507379387Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.509093741Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.512515105Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.521404009Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.524879805Z 61 PC: 12af8 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:12:27.533509162Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.540871766Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.54277248Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.546870676Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.548938555Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.552092666Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.561782466Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.565138086Z 61 PC: 12af8 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:12:27.5727825Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.582430603Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.585037335Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.588974659Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.591314789Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.596197079Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.606034878Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.61391228Z 61 PC: 12af8 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:12:27.620747524Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.628443496Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.629906847Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.633404904Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.635128225Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.637607797Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.647665671Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.65217513Z 61 PC: 12af8 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:12:27.660642742Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.674009547Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.676616169Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.680381329Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.682192004Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.69203388Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.701551858Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.704880407Z 61 PC: 12af8 | Open file (Filename = 'PAH.COM')
2018-12-17T23:12:27.713182618Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.720923574Z 66 PC: 12b1c | Move file pointer
2018-12-17T23:12:27.723109274Z 64 PC: 12b42 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:12:27.727688465Z 66 PC: 12b4e | Move file pointer
2018-12-17T23:12:27.730434519Z 64 PC: 12b59 | Write file or device (Write 327 bytes on handle 5)
2018-12-17T23:12:27.733920724Z 62 PC: 12b62 | Close file
2018-12-17T23:12:27.743850215Z 79 PC: 12b66 | Find next file
2018-12-17T23:12:27.746763985Z 61 PC: 12af8 | Open file (Filename = 'PAH.COM')
2018-12-17T23:12:27.753737477Z 63 PC: 12b07 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:12:27.756622502Z 62 PC: 12b6e | Close file