When the virus is loaded into memory, it hooks INT 21h to infect any executable that is run. It does not infect .COM files smaller than 128 bytes or greater than 60,000 bytes, but can infect .EXE files of any size. The virus may activate by displaying an ASCII ambulance moving across the bottom of the screen with siren sound emitting from the PC speaker, and it might delete files. However the activation condition is currently unknown.
The exact memory usage is 3,488 bytes.