Sample viewer

vx.netlux.org/Virus.DOS.V.450

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:13:49.903031378Z 26 PC: 190e2 | Set disk transfer address
2018-12-17T22:13:49.906034871Z 78 PC: 19107 | Find first file
2018-12-17T22:13:49.911940679Z 61 PC: 19129 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:13:49.918305074Z 66 PC: 191dd | Move file pointer
2018-12-17T22:13:49.921250507Z 63 PC: 191eb | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:13:49.927657139Z 66 PC: 19142 | Move file pointer
2018-12-17T22:13:49.928973821Z 63 PC: 19151 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:13:49.932115704Z 66 PC: 1917d | Move file pointer
2018-12-17T22:13:49.934372305Z 64 PC: 1918f | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:13:49.936954579Z 66 PC: 191a2 | Move file pointer
2018-12-17T22:13:49.938738546Z 64 PC: 191b1 | Write file or device (Write 450 bytes on handle 5)
2018-12-17T22:13:49.9537444Z 62 PC: 191b6 | Close file
2018-12-17T22:13:49.96240269Z 48 PC: 13887 | Get DOS version
2018-12-17T22:13:49.964264361Z 9 PC: 13893 | Display string (String= 'Falsche DOS-Fassung ')