Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.KbWin.1349

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:50:00.558119233Z 75 PC: 12add | Execute program
2018-12-17T22:50:00.56101609Z 74 PC: 12b5f | Reallocate memory
2018-12-17T22:50:00.562935334Z 53 PC: 12b64 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:00.564437779Z 37 PC: 12b78 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:50:00.566210328Z 53 PC: 12b7d | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:50:00.568160653Z 37 PC: 12b8f | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:50:00.569706273Z 75 PC: 12bbb | Execute program
2018-12-17T22:50:00.584307017Z 76 PC: 130f5 | Terminate with return code (Return code = '0')
2018-12-17T22:50:00.588317311Z 73 PC: 12bc1 | Release memory
2018-12-17T22:50:00.589972385Z 77 PC: 12bc5 | Get program return code
2018-12-17T22:50:00.59146603Z 49 PC: 12bd3 | Terminate and stay resident (Return code = '0' | Memory size = '101')