Sample viewer

vx.netlux.org/Virus.DOS.Wordvir.1387

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:14:58.766544129Z 48 PC: 1347f | Get DOS version
2018-12-17T22:14:58.768737865Z 74 PC: 215fe | Reallocate memory
2018-12-17T22:14:58.770043635Z 72 PC: 21605 | Allocate memory
2018-12-17T22:14:58.771601453Z 72 PC: 21609 | Allocate memory
2018-12-17T22:14:58.773760297Z 80 PC: 13ff1 | Set current PSP
2018-12-17T22:14:58.774676057Z 53 PC: 13ff9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:14:58.775820059Z 37 PC: 1401f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:14:58.776910997Z 26 PC: 14028 | Set disk transfer address
2018-12-17T22:14:58.778933736Z 48 PC: 139a1 | Get DOS version
2018-12-17T22:14:58.780851259Z 9 PC: 139ad | Display string (String= 'Incorrect DOS version ')
2018-12-17T22:14:58.785588848Z 76 PC: 139b1 | Terminate with return code (Return code = '36')