Sample viewer

vx.netlux.org/Virus.DOS.WereWolf.685.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:38.725964358Z 71 PC: 12c82 | Get current directory
2018-12-17T22:47:38.729208561Z 26 PC: 12d4e | Set disk transfer address
2018-12-17T22:47:38.732503562Z 78 PC: 12d9a | Find first file
2018-12-17T22:47:38.743190503Z 67 PC: 12da8 | Get or set file attributes
2018-12-17T22:47:38.761463511Z 61 PC: 12daf | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:38.769615642Z 63 PC: 12dbc | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:47:38.772629545Z 87 PC: 12e7c | Get or set file date and time
2018-12-17T22:47:38.774778469Z 62 PC: 12e80 | Close file
2018-12-17T22:47:38.783641469Z 67 PC: 12e8e | Get or set file attributes
2018-12-17T22:47:38.788959436Z 79 PC: 12d9a | Find next file
2018-12-17T22:47:38.79153987Z 26 PC: 12d4e | Set disk transfer address
2018-12-17T22:47:38.793246617Z 78 PC: 12d1e | Find first file
2018-12-17T22:47:38.800695891Z 59 PC: 12d45 | Change current directory
2018-12-17T22:47:38.805685869Z 26 PC: 12d4e | Set disk transfer address
2018-12-17T22:47:38.808129659Z 26 PC: 12d4e | Set disk transfer address
2018-12-17T22:47:38.809517047Z 78 PC: 12d9a | Find first file
2018-12-17T22:47:38.816104587Z 67 PC: 12da8 | Get or set file attributes
2018-12-17T22:47:38.827172297Z 61 PC: 12daf | Open file (Filename = 'TEST.EXE')
2018-12-17T22:47:38.835198868Z 63 PC: 12dbc | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:47:38.838064978Z 87 PC: 12e7c | Get or set file date and time
2018-12-17T22:47:38.839637976Z 62 PC: 12e80 | Close file
2018-12-17T22:47:38.847972959Z 67 PC: 12e8e | Get or set file attributes
2018-12-17T22:47:38.8531728Z 79 PC: 12d9a | Find next file
2018-12-17T22:47:38.856231242Z 59 PC: 12c98 | Change current directory
2018-12-17T22:47:38.861058764Z 26 PC: 12d4e | Set disk transfer address
2018-12-17T22:47:38.862288657Z 78 PC: 12d1e | Find first file
2018-12-17T22:47:38.869194619Z 59 PC: 12cb1 | Change current directory
2018-12-17T22:47:38.875032279Z 26 PC: 12cdb | Set disk transfer address
2018-12-17T22:47:38.876445988Z 76 PC: 12aa4 | Terminate with return code (Return code = '33')