Sample viewer

vx.netlux.org/Virus.DOS.IVP.Birgit.303

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:18.121673708Z 53 PC: 12a4b | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:18.128617376Z 37 PC: 12a5c | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:18.131566517Z 71 PC: 12a67 | Get current directory
2018-12-17T22:47:18.135401455Z 78 PC: 12a9d | Find first file
2018-12-17T22:47:18.142297545Z 78 PC: 12a9d | Find first file
2018-12-17T22:47:18.15526025Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.158269919Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.161135787Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.165449239Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.17077314Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.173755724Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.177181733Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.180212287Z 79 PC: 12a9d | Find next file
2018-12-17T22:47:18.182814215Z 59 PC: 12a7a | Change current directory
2018-12-17T22:47:18.18739189Z 9 PC: 12a83 | Display string (String= 'Birgit [IVP] Error: Not Enough Memory!')
2018-12-17T22:47:18.19800365Z 37 PC: 12a8b | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:18.199313616Z 59 PC: 12a94 | Change current directory