Sample viewer

vx.netlux.org/Virus.DOS.Keeper.Massacre.778

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:32.470566195Z 53 PC: 12b5e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:32.472547516Z 53 PC: 12b6b | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:51:32.474888959Z 37 PC: 12bbf | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:51:32.476169611Z 37 PC: 12bc7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')