Sample viewer

vx.netlux.org/Virus.DOS.VCL.3234.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:52:34.056687527Z 25 PC: 13338 | Get default drive
2018-12-17T22:52:34.058565015Z 48 PC: 1333f | Get DOS version
2018-12-17T22:52:34.06063811Z 14 PC: 13387 | Set default drive (Drive = 'A')
2018-12-17T22:52:34.062116495Z 26 PC: 13391 | Set disk transfer address
2018-12-17T22:52:34.063370756Z 78 PC: 1339d | Find first file
2018-12-17T22:52:34.070659111Z 14 PC: 133a6 | Set default drive (Drive = 'A')
2018-12-17T22:52:34.128508532Z 53 PC: 1341c | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:52:34.129979967Z 37 PC: 1342c | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:52:34.136478943Z 53 PC: 13431 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:52:34.137779496Z 37 PC: 13441 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:52:34.139026198Z 49 PC: 13456 | Terminate and stay resident (Return code = '9' | Memory size = '160')