Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.Pipi.1552.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:15:29.186406165Z 224 PC: 12aec | UNKNOWN!
2018-12-17T22:15:29.188085103Z 53 PC: 12f29 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:29.189264798Z 37 PC: 12f3f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:29.190411021Z 53 PC: 12f5e | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:15:29.197527914Z 37 PC: 12f74 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:15:29.199086054Z 74 PC: 12f81 | Reallocate memory
2018-12-17T22:15:29.200875124Z 75 PC: 12fea | Execute program
2018-12-17T22:15:29.215821702Z 224 PC: 42b4c | UNKNOWN!
2018-12-17T22:15:29.219428862Z 73 PC: 12ff0 | Release memory
2018-12-17T22:15:29.221007827Z 77 PC: 12ff4 | Get program return code
2018-12-17T22:15:29.222479182Z 49 PC: 12ffb | Terminate and stay resident (Return code = '0' | Memory size = '128')