Sample viewer

vx.netlux.org/Virus.DOS.OkUser.559

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:46:51.593516924Z 53 PC: 12b42 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:51.595166013Z 37 PC: 12b53 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:46:51.5963316Z 78 PC: 12b5d | Find first file
2018-12-17T22:46:51.602138043Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.605193712Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.607893815Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.609219997Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.611829293Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.613383928Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.615756403Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.61728913Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.620018997Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.62124583Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.623447875Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.625102796Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.627441407Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.628682891Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.631816688Z 61 PC: 12b82 | Open file (Filename = 'TEST.COM')
2018-12-17T22:46:51.638894214Z 63 PC: 12b99 | Read file or device (Read 6 bytes on handle 0)
2018-12-17T22:46:51.641852972Z 62 PC: 12ac7 | Close file
2018-12-17T22:46:51.645014582Z 79 PC: 12b5d | Find next file
2018-12-17T22:46:51.647624985Z 37 PC: 12c42 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')