Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.3887

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:21:41.517890169Z 220 PC: 13d01 | UNKNOWN!
2018-12-17T22:21:41.51964284Z 74 PC: 12b85 | Reallocate memory
2018-12-17T22:21:41.520757327Z 53 PC: 12b8a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:41.522065827Z 37 PC: 12b9d | Set interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-17T22:21:41.523652532Z 37 PC: 12ba7 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:21:41.524936144Z 53 PC: 12be0 | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:21:41.526045512Z 53 PC: 12bed | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:21:41.527610295Z 37 PC: 12bff | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:21:41.528792427Z 37 PC: 12c0e | Set interrupt vector (Interrupt = '114' AKA 'UNKNOWN!')
2018-12-17T22:21:41.529825508Z 37 PC: 12c17 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-17T22:21:41.533692005Z 75 PC: 12c27 | Execute program
2018-12-17T22:21:41.550776582Z 9 PC: 13d8c | Display string (Could not find end pointer)
2018-12-17T22:21:41.556812347Z 76 PC: 13d91 | Terminate with return code (Return code = '0')
2018-12-17T22:21:41.560010718Z 73 PC: 12c2d | Release memory
2018-12-17T22:21:41.562225922Z 77 PC: 12c31 | Get program return code
2018-12-17T22:21:41.563404789Z 49 PC: 12c3f | Terminate and stay resident (Return code = '0' | Memory size = '318')