Sample viewer

vx.netlux.org/Virus.DOS.Vienna.BNB.498

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:24.263764964Z 53 PC: 13276 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:42:24.265895063Z 37 PC: 13284 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:42:24.269185628Z 47 PC: 1328b | Get disk transfer address
2018-12-17T22:42:24.270813115Z 26 PC: 1329b | Set disk transfer address
2018-12-17T22:42:24.272450699Z 78 PC: 132c1 | Find first file
2018-12-17T22:42:24.280750062Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.283942217Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.287464909Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.291103164Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.29463981Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.297753375Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.30114555Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.304996977Z 67 PC: 13301 | Get or set file attributes
2018-12-17T22:42:24.323345302Z 61 PC: 1330b | Open file (Filename = 'TEST.COM')
2018-12-17T22:42:24.33105629Z 63 PC: 1331a | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:42:24.335872406Z 87 PC: 1338a | Get or set file date and time
2018-12-17T22:42:24.338034957Z 62 PC: 1338e | Close file
2018-12-17T22:42:24.347495451Z 67 PC: 1339d | Get or set file attributes
2018-12-17T22:42:24.361474206Z 79 PC: 132e5 | Find next file
2018-12-17T22:42:24.364780135Z 26 PC: 132d1 | Set disk transfer address
2018-12-17T22:42:24.366533605Z 37 PC: 132d8 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')