Sample viewer

vx.netlux.org/Virus.DOS.WereWolf.678

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:19:56.46536688Z 71 PC: 12c7c | Get current directory
2018-12-17T22:19:56.469893638Z 26 PC: 12d69 | Set disk transfer address
2018-12-17T22:19:56.471473449Z 78 PC: 12db5 | Find first file
2018-12-17T22:19:56.478429485Z 67 PC: 12dc3 | Get or set file attributes
2018-12-17T22:19:56.496560359Z 61 PC: 12dca | Open file (Filename = '')
2018-12-17T22:19:56.505011215Z 63 PC: 12dd7 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:19:56.509924023Z 87 PC: 12ea1 | Get or set file date and time
2018-12-17T22:19:56.511240176Z 62 PC: 12ea5 | Close file
2018-12-17T22:19:56.517453777Z 67 PC: 12eb3 | Get or set file attributes
2018-12-17T22:19:56.520791938Z 79 PC: 12db5 | Find next file
2018-12-17T22:19:56.522659663Z 26 PC: 12d69 | Set disk transfer address
2018-12-17T22:19:56.524635395Z 78 PC: 12d39 | Find first file
2018-12-17T22:19:56.528424513Z 59 PC: 12d60 | Change current directory
2018-12-17T22:19:56.533271288Z 26 PC: 12d69 | Set disk transfer address
2018-12-17T22:19:56.535493683Z 26 PC: 12d69 | Set disk transfer address
2018-12-17T22:19:56.537239304Z 78 PC: 12db5 | Find first file
2018-12-17T22:19:56.551922539Z 67 PC: 12dc3 | Get or set file attributes
2018-12-17T22:19:56.573851534Z 61 PC: 12dca | Open file (Filename = '')
2018-12-17T22:19:56.58302476Z 63 PC: 12dd7 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:19:56.590913487Z 87 PC: 12ea1 | Get or set file date and time
2018-12-17T22:19:56.593476264Z 62 PC: 12ea5 | Close file
2018-12-17T22:19:56.602225308Z 67 PC: 12eb3 | Get or set file attributes
2018-12-17T22:19:56.608129003Z 79 PC: 12db5 | Find next file
2018-12-17T22:19:56.611328864Z 59 PC: 12c8f | Change current directory
2018-12-17T22:19:56.627752696Z 26 PC: 12d69 | Set disk transfer address
2018-12-17T22:19:56.629563942Z 78 PC: 12d39 | Find first file
2018-12-17T22:19:56.63639048Z 59 PC: 12ca8 | Change current directory
2018-12-17T22:19:56.640698556Z 26 PC: 12cd2 | Set disk transfer address
2018-12-17T22:19:56.642296329Z 76 PC: 12aa4 | Terminate with return code (Return code = '1')