Sample viewer

vx.netlux.org/Virus.DOS.Zorm.1123.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:53:12.215472955Z 61 PC: 12ab8 | Open file (Filename = 'Í ÀŸ')
2018-12-17T22:53:12.224673548Z 26 PC: 12eac | Set disk transfer address
2018-12-17T22:53:12.228781515Z 53 PC: 12b31 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:12.230524098Z 37 PC: 12b41 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:53:12.232531749Z 71 PC: 12b51 | Get current directory
2018-12-17T22:53:12.23722762Z 25 PC: 12b55 | Get default drive
2018-12-17T22:53:12.238559542Z 14 PC: 12b63 | Set default drive (Drive = 'C')
2018-12-17T22:53:12.240381094Z 78 PC: 12e0d | Find first file
2018-12-17T22:53:12.247582351Z 59 PC: 12e1b | Change current directory
2018-12-17T22:53:12.252111408Z 14 PC: 12d8b | Set default drive (Drive = 'A')
2018-12-17T22:53:12.254014573Z 59 PC: 12d98 | Change current directory
2018-12-17T22:53:12.2599165Z 71 PC: 12b51 | Get current directory
2018-12-17T22:53:12.263612112Z 25 PC: 12b55 | Get default drive
2018-12-17T22:53:12.265281908Z 14 PC: 12b63 | Set default drive (Drive = 'C')