Sample viewer

vx.netlux.org/Virus.DOS.SillyC.216.c

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:18:52.641171145Z 78 PC: 12a78 | Find first file
2018-12-17T22:18:52.648807612Z 61 PC: 12a92 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:18:52.655956316Z 63 PC: 12a9f | Read file or device (Read 216 bytes on handle 5)
2018-12-17T22:18:52.662640049Z 66 PC: 12ac0 | Move file pointer
2018-12-17T22:18:52.664444339Z 64 PC: 12acd | Write file or device (Write 216 bytes on handle 5)
2018-12-17T22:18:52.679313082Z 66 PC: 12ad6 | Move file pointer
2018-12-17T22:18:52.680780405Z 64 PC: 12ae0 | Write file or device (Write 216 bytes on handle 5)
2018-12-17T22:18:52.688104424Z 62 PC: 12ae4 | Close file
2018-12-17T22:18:52.697307378Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.700149797Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.70286728Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.710065802Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.712746517Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.715308108Z 61 PC: 12a92 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:18:52.723513447Z 63 PC: 12a9f | Read file or device (Read 216 bytes on handle 5)
2018-12-17T22:18:52.730455328Z 66 PC: 12ac0 | Move file pointer
2018-12-17T22:18:52.731879409Z 64 PC: 12acd | Write file or device (Write 216 bytes on handle 5)
2018-12-17T22:18:52.740814425Z 66 PC: 12ad6 | Move file pointer
2018-12-17T22:18:52.742251772Z 64 PC: 12ae0 | Write file or device (Write 216 bytes on handle 5)
2018-12-17T22:18:52.749476395Z 62 PC: 12ae4 | Close file
2018-12-17T22:18:52.759169533Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.762265322Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.764926375Z 61 PC: 12a92 | Open file (Filename = 'TEST.COM')
2018-12-17T22:18:52.772502589Z 63 PC: 12a9f | Read file or device (Read 216 bytes on handle 5)
2018-12-17T22:18:52.775239402Z 62 PC: 12ae4 | Close file
2018-12-17T22:18:52.777029816Z 79 PC: 12a78 | Find next file
2018-12-17T22:18:52.781067753Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ')
2018-12-17T22:18:52.787034274Z 0 PC: 12a89 | Program terminate