Sample viewer

vx.netlux.org/Virus.DOS.Opal.390

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:35.552731908Z 25 PC: 132b7 | Get default drive
2018-12-17T22:44:35.553920091Z 14 PC: 132be | Set default drive (Drive = 'C')
2018-12-17T22:44:35.556768051Z 71 PC: 132c9 | Get current directory
2018-12-17T22:44:35.560554038Z 78 PC: 132d9 | Find first file
2018-12-17T22:44:35.567431387Z 61 PC: 13325 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:44:35.575458428Z 62 PC: 133ce | Close file
2018-12-17T22:44:35.577436852Z 67 PC: 13347 | Get or set file attributes
2018-12-17T22:44:35.584275028Z 67 PC: 13350 | Get or set file attributes
2018-12-17T22:44:35.924573257Z 61 PC: 13355 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:44:35.931464833Z 66 PC: 133e0 | Move file pointer
2018-12-17T22:44:35.932931412Z 63 PC: 13369 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:44:35.936739996Z 66 PC: 133e0 | Move file pointer
2018-12-17T22:44:35.938422665Z 64 PC: 133d5 | Write file or device (Write 390 bytes on handle 5)
2018-12-17T22:44:35.945678714Z 66 PC: 133e0 | Move file pointer
2018-12-17T22:44:35.948222533Z 64 PC: 133d5 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:44:35.951241617Z 87 PC: 133bd | Get or set file date and time
2018-12-17T22:44:35.952724867Z 62 PC: 133ce | Close file
2018-12-17T22:44:35.960293832Z 67 PC: 133c5 | Get or set file attributes
2018-12-17T22:44:35.97089727Z 78 PC: 132d9 | Find first file
2018-12-17T22:44:35.978395196Z 61 PC: 13325 | Open file (Filename = 'COMMAND.COM')
2018-12-17T22:44:35.985714517Z 62 PC: 133ce | Close file
2018-12-17T22:44:35.988321005Z 79 PC: 1333b | Find next file
2018-12-17T22:44:35.991061058Z 78 PC: 132e7 | Find first file
2018-12-17T22:44:35.996784541Z 59 PC: 13306 | Change current directory
2018-12-17T22:44:36.001206824Z 59 PC: 13317 | Change current directory
2018-12-17T22:44:36.002620454Z 14 PC: 1331c | Set default drive (Drive = 'A')
2018-12-17T22:44:36.003666636Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/....). Size=00000834h/0000002100d bytes. ')
2018-12-17T22:44:36.008346524Z 48 PC: 12a8f | Get DOS version
2018-12-17T22:44:36.009787293Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-17T22:44:36.017833847Z 93 PC: 12afe | File sharing functions
2018-12-17T22:44:36.02075799Z 9 PC: 12a86 | Display string (String= 'Size change=0186h/00390d. ')
2018-12-17T22:44:36.025578948Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')