Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.Miky

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:05.05588083Z 74 PC: 130d0 | Reallocate memory
2018-12-17T22:42:05.057718111Z 53 PC: 130da | Get interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:42:05.05983113Z 37 PC: 130ed | Set interrupt vector (Interrupt = '22' AKA 'Create or truncate file')
2018-12-17T22:42:05.061365772Z 37 PC: 130f6 | Set interrupt vector (Interrupt = '128' AKA 'UNKNOWN!')
2018-12-17T22:42:05.062872201Z 53 PC: 130fc | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:05.065323776Z 37 PC: 1310f | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:05.067169021Z 75 PC: 13140 | Execute program
2018-12-17T22:42:05.083140749Z 48 PC: 13f2b | Get DOS version
2018-12-17T22:42:05.085109557Z 9 PC: 13f37 | Display string (String= ' Incorrect DOS version ')
2018-12-17T22:42:05.093403224Z 73 PC: 13148 | Release memory
2018-12-17T22:42:05.095248841Z 49 PC: 1314f | Terminate and stay resident (Return code = '125' | Memory size = '131')