Sample viewer

vx.netlux.org/Virus.DOS.Zorm.1193

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:11:30.625943771Z 26 PC: 12e7f | Set disk transfer address
2018-12-17T23:11:30.627402555Z 53 PC: 12ae4 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:30.630290927Z 37 PC: 12af4 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:11:30.63174389Z 71 PC: 12b04 | Get current directory
2018-12-17T23:11:30.634968104Z 25 PC: 12b08 | Get default drive
2018-12-17T23:11:30.637212305Z 14 PC: 12b16 | Set default drive (Drive = 'C')
2018-12-17T23:11:30.639038038Z 78 PC: 12de0 | Find first file
2018-12-17T23:11:30.645391697Z 59 PC: 12dee | Change current directory
2018-12-17T23:11:30.650956684Z 14 PC: 12d5e | Set default drive (Drive = 'A')
2018-12-17T23:11:30.652802716Z 59 PC: 12d6b | Change current directory
2018-12-17T23:11:30.657581814Z 71 PC: 12b04 | Get current directory
2018-12-17T23:11:30.661241367Z 25 PC: 12b08 | Get default drive
2018-12-17T23:11:30.663019391Z 14 PC: 12b16 | Set default drive (Drive = 'C')