Sample viewer

vx.netlux.org/Virus.DOS.Jerusalem.CVEX.5120.g

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:42:35.582692978Z 53 PC: 12dae | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:35.584035379Z 172 PC: 12dc2 | UNKNOWN!
2018-12-17T22:42:35.586895962Z 53 PC: 12f1d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:35.589332207Z 172 PC: 12f9f | UNKNOWN!
2018-12-17T22:42:35.591131968Z 74 PC: 1303d | Reallocate memory
2018-12-17T22:42:35.594330926Z 53 PC: 13048 | Get interrupt vector (Interrupt = '32' AKA 'Reserved')
2018-12-17T22:42:35.596242446Z 37 PC: 1305e | Set interrupt vector (Interrupt = '32' AKA 'Reserved')
2018-12-17T22:42:35.597906742Z 37 PC: 1306a | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:35.599846766Z 53 PC: 13073 | Get interrupt vector (Interrupt = '42' AKA 'Get date')
2018-12-17T22:42:35.60207435Z 75 PC: 130aa | Execute program
2018-12-17T22:42:35.617750832Z 53 PC: 142fe | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:42:35.621590594Z 73 PC: 130b5 | Release memory
2018-12-17T22:42:35.624221786Z 77 PC: 130be | Get program return code
2018-12-17T22:42:35.626035763Z 49 PC: 130d2 | Terminate and stay resident (Return code = '0' | Memory size = '319')