Sample viewer

vx.netlux.org/Virus.DOS.Khizhnjak.875

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:18:30.587524965Z 78 PC: 13ad8 | Find first file
2018-12-17T22:18:30.594216531Z 67 PC: 13b25 | Get or set file attributes
2018-12-17T22:18:30.610449843Z 61 PC: 13b33 | Open file (Filename = 'Ž')
2018-12-17T22:18:30.62199733Z 63 PC: 13b4a | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:30.628851656Z 66 PC: 13b5f | Move file pointer
2018-12-17T22:18:30.63038537Z 66 PC: 13b99 | Move file pointer
2018-12-17T22:18:30.631746539Z 63 PC: 13bad | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:18:30.634822547Z 66 PC: 13bd9 | Move file pointer
2018-12-17T22:18:30.636267852Z 64 PC: 13beb | Write file or device (Write 875 bytes on handle 5)
2018-12-17T22:18:30.644433075Z 66 PC: 13bfd | Move file pointer
2018-12-17T22:18:30.646775287Z 64 PC: 13c0e | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:18:30.651385464Z 9 PC: 13c18 | Display string (Could not find end pointer)
2018-12-17T22:18:30.656699445Z 62 PC: 13c27 | Close file
2018-12-17T22:18:30.680628524Z 48 PC: 139ec | Get DOS version
2018-12-17T22:18:30.681676685Z 9 PC: 139fe | Display string (String= ' Incorrect DOS version ')