Sample viewer

vx.netlux.org/Virus.DOS.SillyC.316

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:10:17.529394767Z 47 PC: 17c35 | Get disk transfer address
2018-12-17T22:10:17.532057009Z 26 PC: 17c43 | Set disk transfer address
2018-12-17T22:10:17.533467104Z 78 PC: 17ccc | Find first file
2018-12-17T22:10:17.53943908Z 47 PC: 17cd2 | Get disk transfer address
2018-12-17T22:10:17.54134084Z 61 PC: 17c6e | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:10:17.547941712Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.554095153Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.556013314Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.558607006Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.559983879Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.574326498Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.58270715Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.585741697Z 61 PC: 17c6e | Open file (Filename = 'PRINT.COM')
2018-12-17T22:10:17.594025717Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.600695327Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.602297457Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.605448265Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.607366768Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.610258783Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.618166094Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.625552207Z 61 PC: 17c6e | Open file (Filename = 'HELLO.COM')
2018-12-17T22:10:17.632011005Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.638528008Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.64869604Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.651497829Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.653253204Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.656458058Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.662992822Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.665334984Z 61 PC: 17c6e | Open file (Filename = 'PHANG.COM')
2018-12-17T22:10:17.67363698Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.680701767Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.698056383Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.706168317Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.707887299Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.710853908Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.723804332Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.726683917Z 61 PC: 17c6e | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:10:17.733613081Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.741630393Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.743343468Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.746433538Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.74899107Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.752030852Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.760157176Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.764013865Z 61 PC: 17c6e | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:10:17.770718179Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.777205514Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.779413239Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.782320945Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.783946772Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.793377712Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.801555831Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.804381415Z 61 PC: 17c6e | Open file (Filename = 'PAH.COM')
2018-12-17T22:10:17.812307565Z 63 PC: 17c7c | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:10:17.818794573Z 66 PC: 17c9a | Move file pointer
2018-12-17T22:10:17.820485757Z 64 PC: 17ca3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:10:17.824306243Z 66 PC: 17caf | Move file pointer
2018-12-17T22:10:17.826578867Z 64 PC: 17cbb | Write file or device (Write 316 bytes on handle 5)
2018-12-17T22:10:17.829529118Z 62 PC: 17cc2 | Close file
2018-12-17T22:10:17.83809431Z 79 PC: 17ce8 | Find next file
2018-12-17T22:10:17.840731531Z 78 PC: 17d0f | Find first file
2018-12-17T22:10:17.846650844Z 26 PC: 17c55 | Set disk transfer address
2018-12-17T22:10:17.854714863Z 48 PC: 18097 | Get DOS version
2018-12-17T22:10:17.856064847Z 37 PC: 182f6 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:10:17.857394806Z 37 PC: 1832a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:10:17.859394569Z 37 PC: 182c4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')