Invictus.dll is a dynamic link library (.dll) file that can be used by viruses for replication purposes. On its own it does nothing.

Invictus.dll exports the following functions:

TempPath
_close_file
_infect_file
_open_create
_open_read
_open_write

The Invictus.dll file imports code from the Windows file Imagehlp.dll. If Imagehlp.dll is not installed on the system, Invictus.dll will not function.

When an infected file (that uses the Invictus.dll file) is opened, two things will happen:

• The Invictus.dll file is copied to the \System folder.
• The virus itself is copied to the Windows \Temp folder and executed from there.