Sample viewer

vx.netlux.org/Virus.DOS.Terminator.1501

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:06:29.985213781Z 53 PC: 12b13 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T23:06:29.986972253Z 53 PC: 12b21 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:29.988579583Z 53 PC: 12b2f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:06:29.990305319Z 37 PC: 12b41 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:06:29.992008467Z 37 PC: 12b4a | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T23:06:29.994528471Z 37 PC: 12b53 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-17T23:06:29.996271891Z 49 PC: 12b78 | Terminate and stay resident (Return code = '0' | Memory size = '218')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15548,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:44.931600311Z 53 PC: 12b13 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-25T12:43:44.933324634Z 53 PC: 12b21 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:43:44.934915999Z 53 PC: 12b2f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:43:44.936402467Z 37 PC: 12b41 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:43:44.937873049Z 37 PC: 12b4a | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:43:44.939937059Z 37 PC: 12b53 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-25T12:43:44.941409613Z 49 PC: 12b78 | Terminate and stay resident (Return code = '0' | Memory size = '218')

{"DateBased":true,"Day":30,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15548,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:43:44.971107933Z 53 PC: 12b13 | Get interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-25T12:43:44.972840193Z 53 PC: 12b21 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:43:44.973913281Z 53 PC: 12b2f | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:43:44.975185937Z 37 PC: 12b41 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:43:44.976825137Z 37 PC: 12b4a | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:43:44.977852348Z 37 PC: 12b53 | Set interrupt vector (Interrupt = '254' AKA 'UNKNOWN!')
2018-12-25T12:43:44.978843918Z 49 PC: 12b78 | Terminate and stay resident (Return code = '0' | Memory size = '218')