Sample viewer

vx.netlux.org/Virus.DOS.Zorm.1203.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:35:16.85011827Z 26 PC: 12e8a | Set disk transfer address
2018-12-17T22:35:16.851761053Z 53 PC: 12ae7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:16.854599847Z 37 PC: 12af7 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:35:16.856227856Z 71 PC: 12b07 | Get current directory
2018-12-17T22:35:16.859758665Z 25 PC: 12b0b | Get default drive
2018-12-17T22:35:16.862472592Z 14 PC: 12b19 | Set default drive (Drive = 'C')
2018-12-17T22:35:16.864629125Z 78 PC: 12deb | Find first file
2018-12-17T22:35:16.87096816Z 59 PC: 12df9 | Change current directory
2018-12-17T22:35:16.876185262Z 14 PC: 12d68 | Set default drive (Drive = 'A')
2018-12-17T22:35:16.878002727Z 59 PC: 12d75 | Change current directory
2018-12-17T22:35:16.88330738Z 71 PC: 12b07 | Get current directory
2018-12-17T22:35:16.886772697Z 25 PC: 12b0b | Get default drive
2018-12-17T22:35:16.89726843Z 14 PC: 12b19 | Set default drive (Drive = 'C')