Sample viewer

vx.netlux.org/Virus.DOS.Vlab.513

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:43.017213536Z 26 PC: 12a6d | Set disk transfer address
2018-12-17T22:49:43.021775071Z 78 PC: 12a76 | Find first file
2018-12-17T22:49:43.028481723Z 61 PC: 12aab | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:49:43.035784301Z 63 PC: 12ac1 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:49:43.04274415Z 66 PC: 12adb | Move file pointer
2018-12-17T22:49:43.046032959Z 64 PC: 12af4 | Write file or device (Write 513 bytes on handle 5)
2018-12-17T22:49:43.061293138Z 66 PC: 12b36 | Move file pointer
2018-12-17T22:49:43.063176098Z 64 PC: 12b08 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:49:43.071023333Z 62 PC: 12b10 | Close file
2018-12-17T22:49:43.080635671Z 79 PC: 12a83 | Find next file
2018-12-17T22:49:43.083554869Z 61 PC: 12aab | Open file (Filename = 'PRINT.COM')
2018-12-17T22:49:43.091199957Z 63 PC: 12ac1 | Read file or device (Read 5 bytes on handle 5)
2018-12-17T22:49:43.098358141Z 66 PC: 12adb | Move file pointer
2018-12-17T22:49:43.099897315Z 64 PC: 12af4 | Write file or device (Write 513 bytes on handle 5)
2018-12-17T22:49:43.109334139Z 66 PC: 12b36 | Move file pointer
2018-12-17T22:49:43.110967079Z 64 PC: 12b08 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:49:43.118199463Z 62 PC: 12b10 | Close file
2018-12-17T22:49:43.127749367Z 79 PC: 12a83 | Find next file
2018-12-17T22:49:43.131155702Z 9 PC: 12b42 | Display string (String= 'This File Is Infected With The Password Virus And Requires A Password To Run. Password:')
2018-12-17T22:49:43.139663107Z 7 PC: 12b4e | Direct console input without echo