Sample viewer

vx.netlux.org/Virus.DOS.Vienna.624

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:54:59.977538061Z 78 PC: 12bc9 | Find first file
2018-12-17T21:54:59.98384378Z 67 PC: 12c16 | Get or set file attributes
2018-12-17T21:55:00.000480842Z 61 PC: 12c24 | Open file (Filename = '~')
2018-12-17T21:55:00.006399992Z 63 PC: 12c3b | Read file or device (Read 3 bytes on handle 5)
2018-12-17T21:55:00.014208319Z 66 PC: 12c51 | Move file pointer
2018-12-17T21:55:00.016045324Z 66 PC: 12c8a | Move file pointer
2018-12-17T21:55:00.017801092Z 63 PC: 12c9e | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:55:00.022056689Z 66 PC: 12cca | Move file pointer
2018-12-17T21:55:00.023998462Z 64 PC: 12cdc | Write file or device (Write 624 bytes on handle 5)
2018-12-17T21:55:00.045418656Z 66 PC: 12cee | Move file pointer
2018-12-17T21:55:00.047058846Z 64 PC: 12cff | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:55:00.060362886Z 9 PC: 12d09 | Display string (Could not find end pointer)
2018-12-17T21:55:00.064240437Z 62 PC: 12d18 | Close file
2018-12-17T21:55:00.073921171Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T21:55:00.077820132Z 76 PC: 12a86 | Terminate with return code (Return code = '36')