Sample viewer

vx.netlux.org/Virus.DOS.Ply.4732.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:01:43.158078812Z 65 PC: 12a78 | Delete file (Filename = '\NCDTREE')
2018-12-17T23:01:43.165409168Z 26 PC: 12d60 | Set disk transfer address
2018-12-17T23:01:43.166415764Z 53 PC: 12d66 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:43.167470627Z 37 PC: 12d81 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:43.169295468Z 78 PC: 12dd0 | Find first file
2018-12-17T23:01:43.175478265Z 37 PC: 12e00 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:01:43.176608125Z 98 PC: 12e0c | Get current PSP
2018-12-17T23:01:43.181363828Z 26 PC: 12e1b | Set disk transfer address
2018-12-17T23:01:43.182491252Z 98 PC: 12fec | Get current PSP