Loads The following DLL(s)[Dynamic Link Library] when this malware is executed :-
%windir%\system32\ntdll.dll
%windir%\system32\kernel32.dll
%windir%\system32\advapi32.dll
%windir%\system32\rpcrt4.dll
%windir%\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\
%windir%\system32\msvcrt.dll
%windir%\system32\gdi32.dll
%windir%\system32\user32.dll
%windir%\system32\shlwapi.dll
%windir%\system32\ole32.dll
%windir%\system32\oleaut32.dll
%windir%\system32\shell32.dll
%windir%\system32\version.dll
%windir%\system32\wininet.dll
%windir%\system32\crypt32.dll
%windir%\system32\msasn1.dll
%windir%\system32\vsmvhk.dll
%windir%\system32\wsock32.dll
%windir%\system32\ws2_32.dll
%windir%\system32\ws2help.dll
%windir%\system32\wship6.dll
%windir%\system32\pstorec.dll
%windir%\system32\atl.dll
%windir%\system32\secur32.dll
kernel32.dll
advapi32.dll
comctl32.dll
gdi32.dll
ole32.dll
oleaut32.dll
rpcrt4.dll
shell32.dll
shlwapi.dll
user32.dll
version.dll
wininet.dll