Sample viewer

vx.netlux.org/Virus.DOS.PC_Ogre.386

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:45:31.547847276Z 26 PC: 12aa9 | Set disk transfer address
2018-12-17T22:45:31.550044152Z 78 PC: 12ab4 | Find first file
2018-12-17T22:45:31.556541605Z 61 PC: 12b71 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:45:31.563830935Z 63 PC: 12b83 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:45:31.577660078Z 66 PC: 12af7 | Move file pointer
2018-12-17T22:45:31.580382752Z 66 PC: 12b64 | Move file pointer
2018-12-17T22:45:31.582840698Z 63 PC: 12b21 | Read file or device (Read 407 bytes on handle 5)
2018-12-17T22:45:31.586173989Z 66 PC: 12b64 | Move file pointer
2018-12-17T22:45:31.58889521Z 64 PC: 12b2e | Write file or device (Write 365 bytes on handle 5)
2018-12-17T22:45:31.592386897Z 64 PC: 12b3a | Write file or device (Write 407 bytes on handle 5)
2018-12-17T22:45:31.609004358Z 64 PC: 12b56 | Write file or device (Write 21 bytes on handle 5)
2018-12-17T22:45:31.613679568Z 62 PC: 12b5a | Close file
2018-12-17T22:45:31.62767847Z 26 PC: 12ba0 | Set disk transfer address
2018-12-17T22:45:31.630167455Z 9 PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ')
2018-12-17T22:45:31.653078284Z 0 PC: 12a89 | Program terminate