Sample viewer

vx.netlux.org/Virus.DOS.Ramthes.655

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:38:28.520228325Z 48 PC: 12ad0 | Get DOS version
2018-12-17T22:38:28.521850043Z 172 PC: 12ad5 | UNKNOWN!
2018-12-17T22:38:28.522730412Z 74 PC: 12afc | Reallocate memory
2018-12-17T22:38:28.524310224Z 74 PC: 12b03 | Reallocate memory
2018-12-17T22:38:28.526591127Z 74 PC: 12b0a | Reallocate memory
2018-12-17T22:38:28.527922709Z 72 PC: 12b11 | Allocate memory
2018-12-17T22:38:28.529415057Z 53 PC: 12b32 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:38:28.53091479Z 37 PC: 12b44 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:38:28.532268757Z 9 PC: 12a4c | Display string (String= ' Virus Mr-X activado!!! Por favor no ejecute ningun archivo. Je, je, je... ')