Sample viewer

vx.netlux.org/Virus.DOS.Keeper.Massacre.775

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:23:29.007085609Z 53 PC: 12a5d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:23:29.008631292Z 53 PC: 12a6a | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:23:29.010740311Z 37 PC: 12abe | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-17T22:23:29.012059468Z 37 PC: 12ac6 | Set interrupt vector (Interrupt = '33' AKA 'Random read')