Sample viewer

vx.netlux.org/Virus.DOS.VCL_MUT.Empire.442

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:57:12.444623098Z 71 PC: 12a6b | Get current directory
2018-12-17T21:57:12.447292386Z 59 PC: 12a8a | Change current directory
2018-12-17T21:57:12.452801298Z 47 PC: 12afe | Get disk transfer address
2018-12-17T21:57:12.453743056Z 26 PC: 12b0f | Set disk transfer address
2018-12-17T21:57:12.45535953Z 78 PC: 12b17 | Find first file
2018-12-17T21:57:12.461220118Z 47 PC: 12b2f | Get disk transfer address
2018-12-17T21:57:12.462162101Z 61 PC: 12b52 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:57:12.468595685Z 63 PC: 12b5d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:12.47103198Z 62 PC: 12b61 | Close file
2018-12-17T21:57:12.472601334Z 67 PC: 12b7f | Get or set file attributes
2018-12-17T21:57:12.493217006Z 61 PC: 12b84 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:57:12.504470242Z 64 PC: 12b8f | Write file or device (Write 442 bytes on handle 5)
2018-12-17T21:57:12.508491219Z 87 PC: 12b9a | Get or set file date and time
2018-12-17T21:57:12.509755463Z 62 PC: 12b9e | Close file
2018-12-17T21:57:12.514978352Z 67 PC: 12bab | Get or set file attributes
2018-12-17T21:57:12.52191249Z 26 PC: 12b29 | Set disk transfer address
2018-12-17T21:57:12.522672402Z 59 PC: 12a9c | Change current directory
2018-12-17T21:57:12.526478614Z 71 PC: 12a6b | Get current directory
2018-12-17T21:57:12.529307366Z 59 PC: 12a8a | Change current directory
2018-12-17T21:57:12.534741747Z 47 PC: 12afe | Get disk transfer address
2018-12-17T21:57:12.536578015Z 26 PC: 12b0f | Set disk transfer address
2018-12-17T21:57:12.538080631Z 78 PC: 12b17 | Find first file
2018-12-17T21:57:12.54386068Z 47 PC: 12b2f | Get disk transfer address
2018-12-17T21:57:12.562201053Z 61 PC: 12b52 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:57:12.573520559Z 63 PC: 12b5d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:12.580624878Z 62 PC: 12b61 | Close file
2018-12-17T21:57:12.591230814Z 79 PC: 12b17 | Find next file
2018-12-17T21:57:12.594026552Z 26 PC: 12b29 | Set disk transfer address
2018-12-17T21:57:12.595194635Z 59 PC: 12a9c | Change current directory
2018-12-17T21:57:12.599913849Z 71 PC: 12a6b | Get current directory
2018-12-17T21:57:12.602891107Z 59 PC: 12a8a | Change current directory
2018-12-17T21:57:12.612999744Z 47 PC: 12afe | Get disk transfer address
2018-12-17T21:57:12.615156197Z 26 PC: 12b0f | Set disk transfer address
2018-12-17T21:57:12.616377755Z 78 PC: 12b17 | Find first file
2018-12-17T21:57:12.622244485Z 47 PC: 12b2f | Get disk transfer address
2018-12-17T21:57:12.623986983Z 61 PC: 12b52 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:57:12.630485652Z 63 PC: 12b5d | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:12.633017938Z 62 PC: 12b61 | Close file
2018-12-17T21:57:12.635151558Z 79 PC: 12b17 | Find next file
2018-12-17T21:57:12.637814891Z 26 PC: 12b29 | Set disk transfer address
2018-12-17T21:57:12.638885738Z 59 PC: 12a9c | Change current directory
2018-12-17T21:57:12.647441432Z 76 PC: 12a53 | Terminate with return code (Return code = '0')