Sample viewer

vx.netlux.org/Virus.DOS.Ash.Riot.441.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:57:41.295736709Z 26 PC: 12a6b | Set disk transfer address
2018-12-17T21:57:41.297701049Z 78 PC: 12aa9 | Find first file
2018-12-17T21:57:41.303744501Z 61 PC: 12ab5 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:57:41.310126412Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.316421637Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.317820971Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.320459899Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.334150569Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.336241414Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.342641974Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.350501694Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.361571955Z 61 PC: 12ab5 | Open file (Filename = 'PRINT.COM')
2018-12-17T21:57:41.368656549Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.374895732Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.37928596Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.382035766Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.384616231Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.386799184Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.389930834Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.398057505Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.401588959Z 61 PC: 12ab5 | Open file (Filename = 'HELLO.COM')
2018-12-17T21:57:41.40862988Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.41577804Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.418019505Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.421232291Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.429237179Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.431213503Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.437972879Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.445872772Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.450537919Z 61 PC: 12ab5 | Open file (Filename = 'PHANG.COM')
2018-12-17T21:57:41.456847946Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.463120188Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.464855522Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.468133684Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.470758613Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.472050456Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.475107396Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.482658987Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.485232338Z 61 PC: 12ab5 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:57:41.492224434Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.498239592Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.499671326Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.504910369Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.507425102Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.508626295Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.519891364Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.527951885Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.530472982Z 61 PC: 12ab5 | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:57:41.538036205Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.544093133Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.545465295Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.54884696Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.55659895Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.558215516Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.565147746Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.572951866Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.575354516Z 61 PC: 12ab5 | Open file (Filename = 'PAH.COM')
2018-12-17T21:57:41.582724906Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.588819524Z 66 PC: 12adb | Move file pointer
2018-12-17T21:57:41.59028274Z 64 PC: 12aef | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.594077562Z 64 PC: 12afa | Write file or device (Write 437 bytes on handle 5)
2018-12-17T21:57:41.596649399Z 66 PC: 12b03 | Move file pointer
2018-12-17T21:57:41.597893154Z 64 PC: 12b21 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:57:41.601555349Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.609230741Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.611782548Z 61 PC: 12ab5 | Open file (Filename = 'TEST.COM')
2018-12-17T21:57:41.618526955Z 63 PC: 12ac4 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:57:41.620918776Z 62 PC: 12a9d | Close file
2018-12-17T21:57:41.622942316Z 79 PC: 12aa9 | Find next file
2018-12-17T21:57:41.625897807Z 26 PC: 12a7f | Set disk transfer address