Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.CVEX.5120.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:08:31.309650902Z 51 PC: 12eca | Get or set Ctrl-Break
2018-12-17T23:08:31.312234064Z 255 PC: 12eda | UNKNOWN!
2018-12-17T23:08:31.31352917Z 172 PC: 12f02 | UNKNOWN!
2018-12-17T23:08:31.314908886Z 74 PC: 12f49 | Reallocate memory
2018-12-17T23:08:31.316884213Z 53 PC: 12f50 | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T23:08:31.31863025Z 37 PC: 12f62 | Set interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T23:08:31.319888095Z 53 PC: 12f67 | Get interrupt vector (Interrupt = '32' AKA 'Reserved')
2018-12-17T23:08:31.3213112Z 37 PC: 12f79 | Set interrupt vector (Interrupt = '32' AKA 'Reserved')
2018-12-17T23:08:31.323213646Z 53 PC: 12f7e | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:08:31.324376419Z 37 PC: 12f90 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:08:31.325635935Z 75 PC: 12fbd | Execute program
2018-12-17T23:08:31.342438913Z 9 PC: 13f97 | Display string (String= 'CVEX III Virus.... Catch by Dr. Noah!!')
2018-12-17T23:08:31.34680186Z 73 PC: 12fc4 | Release memory
2018-12-17T23:08:31.348421716Z 77 PC: 12fc9 | Get program return code
2018-12-17T23:08:31.350639004Z 49 PC: 12fd9 | Terminate and stay resident (Return code = '0' | Memory size = '319')