Sample viewer

vx.netlux.org/Virus.DOS.Vienna.Born.982

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:32:05.953858083Z 65 PC: 151c3 | Delete file (Filename = 'chklist.tav')
2018-12-17T22:32:05.959916183Z 65 PC: 151ce | Delete file (Filename = 'chklist.cps')
2018-12-17T22:32:05.965286757Z 65 PC: 151d9 | Delete file (Filename = 'chklist.ms')
2018-12-17T22:32:05.970791415Z 53 PC: 152c2 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:32:05.977313395Z 37 PC: 152d1 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:32:05.978369725Z 53 PC: 152c2 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:32:05.97937436Z 37 PC: 152d1 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:32:05.987069579Z 53 PC: 152c2 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:32:05.988341246Z 37 PC: 152d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:32:05.989398801Z 47 PC: 154c1 | Get disk transfer address
2018-12-17T22:32:05.992327458Z 26 PC: 154d0 | Set disk transfer address
2018-12-17T22:32:05.997558061Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.005378385Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.008220917Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.010847166Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.013379665Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.015988011Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.020257497Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.022744042Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.025745314Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.036382986Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.039987927Z 67 PC: 153b3 | Get or set file attributes
2018-12-17T22:32:06.046029931Z 67 PC: 153c3 | Get or set file attributes
2018-12-17T22:32:06.402307026Z 61 PC: 153d2 | Open file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:32:06.408949609Z 87 PC: 153e0 | Get or set file date and time
2018-12-17T22:32:06.410872721Z 63 PC: 153f2 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:32:06.417306119Z 66 PC: 1542c | Move file pointer
2018-12-17T22:32:06.418981479Z 64 PC: 1544f | Write file or device (Write 982 bytes on handle 5)
2018-12-17T22:32:06.426987079Z 66 PC: 1545c | Move file pointer
2018-12-17T22:32:06.42955526Z 64 PC: 15472 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:32:06.432717165Z 87 PC: 15483 | Get or set file date and time
2018-12-17T22:32:06.434583753Z 62 PC: 15487 | Close file
2018-12-17T22:32:06.441634683Z 67 PC: 15494 | Get or set file attributes
2018-12-17T22:32:06.452268699Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.458446768Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.462381923Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.46492696Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.467671046Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.470839351Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.47364009Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.476354268Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.479516989Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.485847562Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.489047844Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.492485531Z 67 PC: 153b3 | Get or set file attributes
2018-12-17T22:32:06.498541909Z 67 PC: 153c3 | Get or set file attributes
2018-12-17T22:32:06.507627253Z 61 PC: 153d2 | Open file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:32:06.515251429Z 87 PC: 153e0 | Get or set file date and time
2018-12-17T22:32:06.516782256Z 63 PC: 153f2 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:32:06.521931286Z 66 PC: 1542c | Move file pointer
2018-12-17T22:32:06.524117161Z 64 PC: 1544f | Write file or device (Write 982 bytes on handle 5)
2018-12-17T22:32:06.53363431Z 66 PC: 1545c | Move file pointer
2018-12-17T22:32:06.534959757Z 64 PC: 15472 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:32:06.538895405Z 87 PC: 15483 | Get or set file date and time
2018-12-17T22:32:06.540407583Z 62 PC: 15487 | Close file
2018-12-17T22:32:06.547299396Z 67 PC: 15494 | Get or set file attributes
2018-12-17T22:32:06.557404778Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.563839703Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.566667118Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.569988956Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.572704126Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.575318271Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.578637971Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.582143908Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.584974192Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.592304135Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.595357626Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.598528518Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.607699086Z 67 PC: 153b3 | Get or set file attributes
2018-12-17T22:32:06.613815033Z 67 PC: 153c3 | Get or set file attributes
2018-12-17T22:32:06.623543964Z 61 PC: 153d2 | Open file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:32:06.631056538Z 87 PC: 153e0 | Get or set file date and time
2018-12-17T22:32:06.632924918Z 63 PC: 153f2 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:32:06.638546448Z 66 PC: 1542c | Move file pointer
2018-12-17T22:32:06.640450501Z 64 PC: 1544f | Write file or device (Write 982 bytes on handle 5)
2018-12-17T22:32:06.649872401Z 66 PC: 1545c | Move file pointer
2018-12-17T22:32:06.651494562Z 64 PC: 15472 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:32:06.654502566Z 87 PC: 15483 | Get or set file date and time
2018-12-17T22:32:06.657151204Z 62 PC: 15487 | Close file
2018-12-17T22:32:06.664458496Z 67 PC: 15494 | Get or set file attributes
2018-12-17T22:32:06.672634607Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.678878679Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.681193459Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.683094348Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.68582345Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.687642143Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.689474956Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.6917702Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.694032865Z 78 PC: 1537a | Find first file
2018-12-17T22:32:06.70019436Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.704183449Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.707502233Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.710229853Z 79 PC: 15380 | Find next file
2018-12-17T22:32:06.717606068Z 26 PC: 151a6 | Set disk transfer address
2018-12-17T22:32:06.7189727Z 37 PC: 152f9 | Set interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:32:06.720190373Z 37 PC: 152f9 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:32:06.721621827Z 37 PC: 152f9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:32:06.72270745Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=00002710h/0000010000d bytes. ')
2018-12-17T22:32:06.725116135Z 76 PC: 12a86 | Terminate with return code (Return code = '36')