Sample viewer

vx.netlux.org/Virus.DOS.KeyPress.1232

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:27:18.507595176Z 53 PC: 130b9 | Get interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:27:18.511527997Z 53 PC: 130c6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:18.513611151Z 37 PC: 130d6 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-17T22:27:18.515335305Z 48 PC: 130de | Get DOS version
2018-12-17T22:27:18.517587497Z 37 PC: 130eb | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:27:18.520254506Z 9 PC: 12a4d | Display string (String= 'VIRCAR - Virus carrier .COM program ')