Sample viewer

vx.netlux.org/Virus.DOS.Zorm.601

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:49:50.69472412Z 61 PC: 12a4a | Open file (Filename = 'Í ÀŸ')
2018-12-17T22:49:50.701604819Z 53 PC: 12a89 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:50.703462511Z 37 PC: 12a91 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:49:50.704906817Z 71 PC: 12a9c | Get current directory
2018-12-17T22:49:50.708015718Z 25 PC: 12aa0 | Get default drive
2018-12-17T22:49:50.710817546Z 14 PC: 12aa8 | Set default drive (Drive = 'C')
2018-12-17T22:49:50.712125433Z 61 PC: 12ac5 | Open file (Filename = '')
2018-12-17T22:49:50.714259718Z 63 PC: 12ad1 | Read file or device (Read 28 bytes on handle 2)