Sample viewer

vx.netlux.org/Virus.DOS.Khizhnjak.586

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:18:33.495082005Z 78 PC: 12bc7 | Find first file
2018-12-17T22:18:33.50172598Z 67 PC: 12c08 | Get or set file attributes
2018-12-17T22:18:33.51441192Z 61 PC: 12c15 | Open file (Filename = 'ž')
2018-12-17T22:18:33.518570252Z 63 PC: 12c2b | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:18:33.522733156Z 66 PC: 12c40 | Move file pointer
2018-12-17T22:18:33.524636242Z 66 PC: 12c7a | Move file pointer
2018-12-17T22:18:33.52589723Z 63 PC: 12c8c | Read file or device (Read 1 bytes on handle 5)
2018-12-17T22:18:33.528194708Z 66 PC: 12cb8 | Move file pointer
2018-12-17T22:18:33.529764146Z 64 PC: 12cc8 | Write file or device (Write 586 bytes on handle 5)
2018-12-17T22:18:33.537453264Z 66 PC: 12cda | Move file pointer
2018-12-17T22:18:33.538456569Z 64 PC: 12cea | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:18:33.543147449Z 62 PC: 12cfb | Close file
2018-12-17T22:18:33.548289713Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T22:18:33.551005906Z 76 PC: 12a86 | Terminate with return code (Return code = '36')