Sample viewer

vx.netlux.org/Virus.DOS.Vienna.641

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:15.060491928Z 25 PC: 1516d | Get default drive
2018-12-17T22:20:15.062620734Z 71 PC: 1517c | Get current directory
2018-12-17T22:20:15.065737909Z 47 PC: 15194 | Get disk transfer address
2018-12-17T22:20:15.066843307Z 26 PC: 151a3 | Set disk transfer address
2018-12-17T22:20:15.068697665Z 78 PC: 151c7 | Find first file
2018-12-17T22:20:15.074583917Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.07754405Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.080416826Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.083216209Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.085614123Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.088033513Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.091079544Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.093518724Z 78 PC: 151c7 | Find first file
2018-12-17T22:20:15.102236045Z 79 PC: 151d5 | Find next file
2018-12-17T22:20:15.10550159Z 67 PC: 15234 | Get or set file attributes
2018-12-17T22:20:15.111203669Z 67 PC: 1523e | Get or set file attributes
2018-12-17T22:20:15.538421117Z 61 PC: 15248 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:20:15.548035124Z 63 PC: 1526e | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:20:15.554271523Z 66 PC: 15284 | Move file pointer
2018-12-17T22:20:15.559115652Z 64 PC: 152af | Write file or device (Write 641 bytes on handle 5)
2018-12-17T22:20:15.582800139Z 66 PC: 152c5 | Move file pointer
2018-12-17T22:20:15.583977509Z 64 PC: 152d3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:20:15.586252723Z 87 PC: 152de | Get or set file date and time
2018-12-17T22:20:15.588293248Z 62 PC: 152e7 | Close file
2018-12-17T22:20:15.593332446Z 67 PC: 152f6 | Get or set file attributes
2018-12-17T22:20:15.598340871Z 26 PC: 15303 | Set disk transfer address
2018-12-17T22:20:15.601256863Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=00002710h/0000010000d bytes. ')
2018-12-17T22:20:15.605695361Z 76 PC: 12a86 | Terminate with return code (Return code = '36')