ARRIVAL-NOTICE-pdf[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
ARRIVAL-NOTICE-pdf.exe

ARRIVAL-NOTICE-pdf.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 a2872a57bbad4ddbd5a46e2bd32d502b0f8e0682d89869b72613d5bd5f74b580
MD5 9e85094d5adc576149b0b61728eb1b1c
SHA1 8b9af34bb7e19078f1f05ea4481194791727944d
SHA512 1bb5909d77f822476c802c88377aaebfaef50569a1c5deb7035ccef591113b6b05735f777a070532e4798c291b4f10dbbe99354fad4fa772b3ef03d566eaae53
SSDEEP 12288:WbjSjfsuPH0JjaIsNULtE5oK9PMaYQ9WN09z:WbOjfJPH0Juh6GKK9mQ9ya
MD5 SHA1 SHA512 SSDEEP

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

24:4b:af:0d:a5:0c:00:91:60:53:f1:c6:5f:c9:5a:a3:55:68:ed:38:0e:e8:b8:c5:f5:11:be:60:2b:1f:52:3d:3c:65:7e:a2:2a:d4:87:60:f9:92:e7:7f:3b:d3:34:8d

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Fortifications,OU=Ultrasevere Basisgruppens\ ,O=Fortifications,C=US

Chains

Jan 5, 2026

PE Signature issue

Digest

96:d1:03:64:ff:74:80:66:78:1c:36:7c:e2:c7:26:4c:a3:94:f3:c5:d5:b8:57:99:59:78:0d:6a:d2:ff:9a:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Fortifications,OU=Ultrasevere Basisgruppens\ ,O=Fortifications,C=US

Chains

Jan 5, 2026

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Forstuvninger/Nrhedskravene/bulges.ini

SHA256 1e28aa921ac272a6f3dc063be49aec6e372e726a0d4977d77317a5c11babc130
MD5 b4ab650e058d4eaf31ed3f2419afa3b5
SHA1 31590f1a5631ecef501f4996e537284e6033b3d6
SHA512 b27ba135665e41488e58cf15c49b4b68ca11e4a8e53b0df1c4717a5f08764711b584bd324ba9bed666d73799f8dc43227b2ebf54445811228ea32c6a0643095f
MD5 SHA1 SHA512

Forstuvninger/Nrhedskravene/davyne.cal

SHA256 405c9aac643b296b972c4e0107e0bbe24a762b0504cba73f2a46264a581a810b
MD5 ea4e5bf3aa6266c93e09fe2719d98d3b
SHA1 1e9130e6bbc28fdbf95b88bc69930b31931c46a5
SHA512 aa27e27c2c900129a460394449ccca9cf07a1c582234eb716c653a157a9006fb9128bc52c1ff1598467a6b69f6efe9fca4893fe8723c1018e3a32a2701ea5136
SSDEEP 12:79ACcJSZrADnaqs6aJ+wCMv5K1JAaYJqWf8DG:5vcQZrADnE6aVX5KLMqWfF
MD5 SHA1 SHA512 SSDEEP

Forstuvninger/Nrhedskravene/emulsifiers.ini

SHA256 d8a4e9c7436b79ee6e8e4a7525a65c6f8325f101da402c8b7160ece9b94dc667
MD5 88705ba145b65da2c16cdb1b74b98f8c
SHA1 339b28033495ad427b54298ad2d55c610451c47a
SHA512 7375ae9df91ce144692e3ea7a3ae87097dbc78edb78eba304de5d6655962f9b3ed7edc766929f383ff77fdc179e3601e65c635bc02e25f8cdce815d5e24e47ee
MD5 SHA1 SHA512

Forstuvninger/Nrhedskravene/foraarssemestret.ini

SHA256 ad8b4aeb5e3a1716cb36255c0f6d6e690714db83cd5053ed9e5d3dc70358d5f8
MD5 941f96073c9766a900a7be0432cfb23b
SHA1 d38a07a4bf31dc4704f7f71184afecca21055317
SHA512 d15cdd71004d96480fe428e3cd557fdb9bc3729e44c77f22469328da424232071a5d7f1b82a28ef73362548a2f77f8bd09b797bbea854aaf8d14c8a3c24853e6
MD5 SHA1 SHA512

Forstuvninger/Nrhedskravene/hesselbergs.non

SHA256 942fafdae309fcfc7c6af600d76a41f7aec25e727e4e398cf5c04f9fabddfcbe
MD5 9860a04bf6efcbe9bd5c9d4a0f2e7e2e
SHA1 cf89bbe61a241fd0f32a6d1ea2af98e19812ffd0
SHA512 1593a8c751750297112620171d6fd0ee9f17a57ad8270301670c48716a32cf50b1017ffb45771dae0789819362be98468f2e7a4e8f81ec8b3f79c07accf2afae
SSDEEP 24:es80phbAad+nhf5X0nOEwFvhcpKyqIxcemsqJMeZxD39RN/qVvOM+BGEnXEbB5Lh:eA0/XpE854KyJx7AMMDtRpqpoXEbvm+
MD5 SHA1 SHA512 SSDEEP

Forstuvninger/Nrhedskravene/kulturstoffets.smu

SHA256 e9e2fb6c950c1a322436f09f94e78c03cb6a639d6b1a9b0ca23633243ee78a61
MD5 0f7a50c83fbd611f2b01714a790f2fc9
SHA1 7783e50546c0aa3cca242cf68ff99d16107e5016
SHA512 a50b5305c8d005bfb0b6341130e69a65a3d8a92bc46b0a6aa93267fe0d7a7ffa134413dc445868df710bab10ec8f47017f21e8d01380d562440f433edd42513f
SSDEEP 48:EiEIfj4EJbsOF+GwaikoiaL7fV9bh0pR3xDUEZdgoA:RRTFPpsHbIhwEa
MD5 SHA1 SHA512 SSDEEP

Forstuvninger/Nrhedskravene/monostomous.ini

SHA256 0b9b5855111d542349cec94c19d5c444951684c9b2385072db0664fcb9fec041
MD5 849a6278fac84959bd82de4b440165ae
SHA1 a2a430507a6e74c69624b720c4d89b06088dbf26
SHA512 37f97a43bac9cd1c91573c1ad3cde421505144ed86dc203876946e5917c5a130fa3afaa6e7d19f65eec2f6e7e80542837062e191a247294ef0a1e898021d33a0
MD5 SHA1 SHA512

Forstuvninger/Nrhedskravene/nondominating.ini

SHA256 a778c86512c14bbe2527af569bd9d3bd58cb862077e0e15a9d33043999bfbc48
MD5 00e4556c9532a84a789468c670e08cd2
SHA1 9882ef775dc3dfbb7e0eaabd163fd770552b13c6
SHA512 1c399453d21a48a419a330d8faaa2d5c4d174f9ec4aae6f7960acd2373305d16e7dd10362fe53157e9ad38744ec2d6b070e693b00290eac97e699e3f7732b4f9
MD5 SHA1 SHA512

Forstuvninger/Nrhedskravene/ormeslyngning.pla

SHA256 7de81dec0f0b37faaf7ea416582aab9be3eaa5b01918cba49d9338d9686125ea
MD5 2be737416eacb791e352d69c2facf4bb
SHA1 a578a9c637ae27c247548bdae28bcbe26a4a10f4
SHA512 4e95f0dc3be8607d0a85cc7a4bb45407c881fd7d9918caafeea1227472647d77f1189dbabf6bb94b1bc6d045de62e16e41d703b3088aedebf97919e1633364d0
SSDEEP 48:BEZIInrO/HnHfXaZuFz+hY+gHHdA0Z0RfgCgDQz0M0+:KZIInrWHCKMYXZ0RfZiQm+
MD5 SHA1 SHA512 SSDEEP

Forstuvninger/Rmeblades.fee

SHA256 c315d92523de294e3f3c57ac7aa92937989c2031c1bb9fed48f4fa72996a58d1
MD5 283eaf00461ffeabea207b483d3b4b26
SHA1 d2e788a3437c3991fdd2b32268864869e09fb4ac
SHA512 76e99cedcd4b04f393801155e2ae2f1b834fd2e9c904d7f760456e5c5c899cca35ec4ffbf1fede036f7b5410e84ef291a23d8f825b3516a0ab19aa101af351c6
SSDEEP 96:kUY5pUUm2ZJ7CEBjNFq9PDPtbam4MQa1zP5UheNhI3V3hXT:1qUUmypf8+ZMUeLIlRXT
MD5 SHA1 SHA512 SSDEEP

Forstuvninger/Venstrefljsfraktionens.unf

SHA256 6475e8fc2fac8328e2d94e7ed17ef7eb18716f9e0a85cbab77c4b473fef0f812
MD5 e9181652abf2f312dbd0e5405a0db897
SHA1 5049c05fb1ea2042e78ddaf1bf6dc58c5fe0b152
SHA512 5f2eede6d5a5255448c6c98d055fc38ccb40b827148899e89ebee56072422304e011dfdb5f6259897651ddf69de6a1e17ff7325eeca17a2197980b5eec96f1c1
SSDEEP 192:ItU+Gvk0SF60QN+qjVrAk3Oj8CFiivLNc:ItUlvk0SF60QN+qjVrAk3Oj8CFiivLNc
MD5 SHA1 SHA512 SSDEEP

Inducerende146.jpg

SHA256 9a95926a8bb47e9f189bf2e7e20cadd20852c657376c4b34704a2e5d5e9c0d67
MD5 c7154fe6ed29cc782f0ffaafb074f3df
SHA1 6bc6911e87de477dbef816bc828d6fda4cc0563c
SHA512 ad6f4c09a62e8bf51099b18d839bc2899cee868da527859723f7160788b82eb5db04ed9fd0d8ed16fe46ebe9284e3d7e45994cac922a2557af80c4b4eaa9c9ac
SSDEEP 384:8KjY6NexXptJfR6S7SiHZJtfbAfEte9oG3U+7QDmz67ExNTI+9A7Fl1lr:8SCJpXrhjsfN9/sD6zxNTSb/r
MD5 SHA1 SHA512 SSDEEP

Persulphide.Bro

SHA256 86f429ad34b1440803ebcdf6a5c2c0764c342ec269291305d379dbc792331970
MD5 7867133fde29200b0c04c7755bda7b8b
SHA1 cc94bb6ff8336b5984b7fb9ee60e0ffeba374900
SHA512 999f47816d53b3732560e8e47662c9c27aacb47115034dca0c8dd050541915da8126741fe5c68558a5b90c69d7cc39663b1f19986de1d8588e51fd1d20f3f375
SSDEEP 384:oMZKN9VdGcr0VLJIQjtpOhFt/2VPvsjtXf1fLk4KtDkV558K9lDR4K5R/U2/F:ItZrULtvOhFt/719zMtDkV0+DdR/fF
MD5 SHA1 SHA512 SSDEEP

Rivejernet226.jpg

SHA256 e35a306e5e2fc0699417b9372a7848d19b8c58e1b24fe3db1a3083cd6052ef52
MD5 95859ecc8f1658cf4ae3aef6299fde37
SHA1 749bc730da058160e30c1961a1be2fa4b9db8340
SHA512 e1d3dcc1a4aafa4da7e095589390390f313e7af2ca272105a02fc47afbeddc04f212b3d4a3d3753a2c45b23486297d5b16287fb2e6dc32a257a31d6aa1b663cb
SSDEEP 768:IFaD7kAeqTWEc1Gp4ms+bddWTvlWegpbjHM/m733PVbAbiBO2WrrbiVfPzNw:IF/2iEc1GpLddWTvNiHM/8/YigfrrKBw
MD5 SHA1 SHA512 SSDEEP

Sludge.Pse

SHA256 71e6349ddc6ff9d1655eb0625d1306c5b55cb9c93a1aa550bcad058b3023e6fc
MD5 4166be189fe6314cad60dcdc32bb1cf6
SHA1 861f0f0c7c16fe2a530da2c5ca39cc42d6990a10
SHA512 59e881ddc97d16d695adb0a39cec30fce7d3dd0c5ff340a467270f9cab076089a71f87ea84b0b8dd0becde731566584586a086b77d69ad994e54c3fb313ac6c2
SSDEEP 6144:IVvWP8Wbob6BgSZNt2kn3LFOBWdA/qoO50f4uZj:IVO0Wbq6FZbn34BF/qopw+j
MD5 SHA1 SHA512 SSDEEP

overfldigste.zul

SHA256 9a491628b700bc5d5cad7aec8740b2290b5276b8bb62a78730ec03c089d39079
MD5 92134947cc1c1582e24a9d616bcb4525
SHA1 6555564cdc8ebdb268c9e115e1fcf43291d985cf
SHA512 005263d8f71d7bec5aed13a48377d3e581a2e5c47dcb737755a55174ca7dd5db24681af70019e238328b6ac5e5b468cc0e39c99ac68c4fbd12dc5ac48c86da8c
SSDEEP 96:NPqRNaHG4w6TbpXk6Vgky0uwtUxpsc2UXR4V2UYCRb8u/t:hq6HhRbpXjgkjrtUPtR4V2BChvt
MD5 SHA1 SHA512 SSDEEP

precommunicated.ini

SHA256 44bfa55996bfb3efb6721dd3e461f3e354917362dbbc92b9406d518d9d97b41e
MD5 c3cfe7bb9a415fd07a6e65943f339062
SHA1 56b9d9af83c598255b88130cf13a7d2b6c53b203
SHA512 0fc3c438f9e57600cc67ae15a7943881096877aa56e5af59421dc5ca69fdff12c86376dac0dfc1836bc2b1014b993f5d1f0db5f8a9202fe7c59f5c6b38ae318c
MD5 SHA1 SHA512

selectors.cam

SHA256 b0be4dd1841beea94d07c0e5240eebb2aa6fd5037841cc402d1816178d139e87
MD5 65cce413ebdf941f1d632e008fe4d684
SHA1 f618b5a4437474f3d21d88061f69b4f21482ff53
SHA512 bec1f3214094c74d60c665210ce16be9418d7b309223a8572e737484362e1eaa0b37de9ff3869114d8f928c635b5010df9df964997c43925c175b9ea0470cc49
SSDEEP 192:WcfZJc/KkufFzw2lFbYomC+6tF99v6ym4mzVaiGzyr0tpgoJL:WchJc/KkuNzw28omS9/m4mhuWAtpgCL
MD5 SHA1 SHA512 SSDEEP

unsuppressive.jpg

SHA256 3d40744748ac789fa610dd19d6bb5f819df816803a56c162135e0af1c65105a5
MD5 a9d9e586e478d2106fd11a5f0ba1e686
SHA1 0048eef8e810bf0bc4d20d6a7dbe8a7681b90092
SHA512 65b084e21d85ddf52b770d4f94bf68db2fed0c6e4afbde9c4e7fe732ac264a3bdde3c83cb3ffbc703626b8a0abdb3057c566e748fe947a5fecefe48c40eb0426
SSDEEP 768:27DJq6gl4IJmVoRBZHyXVDp38iCG67L9rG/bMsVtHFHZavAFt:27FqkIJmVmgVDSivsdItHF5cG
MD5 SHA1 SHA512 SSDEEP

ARRIVAL-NOTICE-pdf.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Forstuvninger/Nrhedskravene/bulges.ini

Forstuvninger/Nrhedskravene/davyne.cal

Forstuvninger/Nrhedskravene/emulsifiers.ini

Forstuvninger/Nrhedskravene/foraarssemestret.ini

Forstuvninger/Nrhedskravene/hesselbergs.non

Forstuvninger/Nrhedskravene/kulturstoffets.smu

Forstuvninger/Nrhedskravene/monostomous.ini

Forstuvninger/Nrhedskravene/nondominating.ini

Forstuvninger/Nrhedskravene/ormeslyngning.pla

Forstuvninger/Rmeblades.fee

Forstuvninger/Venstrefljsfraktionens.unf

Inducerende146.jpg

Persulphide.Bro

Rivejernet226.jpg

Sludge.Pse

overfldigste.zul

precommunicated.ini

selectors.cam

unsuppressive.jpg

Sharing

General

Malware Config

Signatures

File Explorer

ARRIVAL-NOTICE-pdf.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Forstuvninger/Nrhedskravene/bulges.ini

Forstuvninger/Nrhedskravene/davyne.cal

Forstuvninger/Nrhedskravene/emulsifiers.ini

Forstuvninger/Nrhedskravene/foraarssemestret.ini

Forstuvninger/Nrhedskravene/hesselbergs.non

Forstuvninger/Nrhedskravene/kulturstoffets.smu

Forstuvninger/Nrhedskravene/monostomous.ini

Forstuvninger/Nrhedskravene/nondominating.ini

Forstuvninger/Nrhedskravene/ormeslyngning.pla

Forstuvninger/Rmeblades.fee

Forstuvninger/Venstrefljsfraktionens.unf

Inducerende146.jpg

Persulphide.Bro

Rivejernet226.jpg

Sludge.Pse

overfldigste.zul

precommunicated.ini

selectors.cam

unsuppressive.jpg