Sample viewer

vx.netlux.org/Virus.DOS.Khizhnjak-based.Hallo.496

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:45:15.971695845Z 78 PC: 12a80 | Find first file
2018-12-17T22:45:15.97773747Z 67 PC: 12ac3 | Get or set file attributes
2018-12-17T22:45:15.994334641Z 61 PC: 12acd | Open file (Filename = '')
2018-12-17T22:45:16.001625594Z 63 PC: 12ae3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:45:16.013861506Z 66 PC: 12af8 | Move file pointer
2018-12-17T22:45:16.015376258Z 66 PC: 12b28 | Move file pointer
2018-12-17T22:45:16.016735876Z 63 PC: 12b3b | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:45:16.019179398Z 66 PC: 12b7b | Move file pointer
2018-12-17T22:45:16.021223286Z 64 PC: 12b93 | Write file or device (Write 496 bytes on handle 5)
2018-12-17T22:45:16.029205191Z 66 PC: 12ba5 | Move file pointer
2018-12-17T22:45:16.030668051Z 64 PC: 12bb6 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:45:16.037800208Z 9 PC: 12bc0 | Display string (Could not find end pointer)
2018-12-17T22:45:16.043635813Z 62 PC: 12bcf | Close file