Sample viewer

vx.netlux.org/Virus.DOS.SillyOCE.277

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:26:40.833888223Z 78 PC: 12a7b | Find first file
2018-12-17T22:26:40.84189884Z 78 PC: 12a7b | Find first file
2018-12-17T22:26:40.848521019Z 61 PC: 12a85 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:26:40.855855031Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 5)
2018-12-17T22:26:40.864156827Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.866997896Z 61 PC: 12a85 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:26:40.874244613Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 6)
2018-12-17T22:26:40.882398273Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.885517219Z 61 PC: 12a85 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:26:40.893783548Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 7)
2018-12-17T22:26:40.901799168Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.905013023Z 71 PC: 12a4d | Get current directory
2018-12-17T22:26:40.908464299Z 59 PC: 12a59 | Change current directory
2018-12-17T22:26:40.915197087Z 78 PC: 12a7b | Find first file
2018-12-17T22:26:40.923001176Z 78 PC: 12a7b | Find first file
2018-12-17T22:26:40.92981991Z 61 PC: 12a85 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:26:40.937261366Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 8)
2018-12-17T22:26:40.941448514Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.944471437Z 61 PC: 12a85 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:26:40.953181983Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 9)
2018-12-17T22:26:40.957073788Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.96015826Z 61 PC: 12a85 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:26:40.967342965Z 64 PC: 12a92 | Write file or device (Write 277 bytes on handle 10)
2018-12-17T22:26:40.971517878Z 79 PC: 12a97 | Find next file
2018-12-17T22:26:40.974685041Z 59 PC: 12a64 | Change current directory
2018-12-17T22:26:40.979491522Z 9 PC: 12aa3 | Display string (String= ' Bad Command or file name ')
2018-12-17T22:26:40.987047824Z 76 PC: 12aa7 | Terminate with return code (Return code = '36')