Sample viewer

vx.netlux.org/Trojan.DOS.IntLock

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:04:56.732529225Z 53 PC: 12a78 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:04:56.734244552Z 37 PC: 12a8b | Set interrupt vector (Interrupt = '48' AKA 'Get DOS version')
2018-12-17T23:04:56.735331962Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:04:56.736238599Z 49 PC: 12a9a | Terminate and stay resident (Return code = '0' | Memory size = '20')