2026[.]08[.]17裁员名单及补偿方案_SUTE[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2026.08.17裁员名单及补偿方案_SUTE.exe
Size 184KB
Sample260817-ppwt6azfmg
SHA256 ae2b32e249008a421c983e702c5c8ef9d9c674deeedf592c76a05ba5b8793c0d
MD5 51f457b31984a36abd358554c83ab384
SHA1 cdb3b335253b9f2fb20bd1f9f1e94bb1f3ad409d
SHA512 abb94594e630084dbe7e1bcc4b1bd3dde6895ff584519e67765a94842e25e5acdf2f66264e21d0408ac10ca353369e18ce0b1b97e28fda9598f69c77bba32b00
SSDEEP 3072:wAKCfRW8JL1P3jjq9kq/1Rtp+1OsJ12tFzCzLDAz02P1+kvWhDiwPBqAZ:wAKCfRW8h1P3jjq9kq/1RtY1Om86zLDr
TLSH
T1E1045B06E7A251FAD1AFD078C4C38622FB7178545BE1AADB1B188A750F61BC4AF3D311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026.08.17裁员名单及补偿方案_SUTE.exe

File Explorer

2026.08.17裁员名单及补偿方案_SUTE.exe

.exe 184KB

2026.08.17裁员名单及补偿方案_SUTE.exe

IMPHASH 13f1f0fa6ebb0140f5c2c32d802ab4a3
SHA256 ae2b32e249008a421c983e702c5c8ef9d9c674deeedf592c76a05ba5b8793c0d
MD5 51f457b31984a36abd358554c83ab384
SHA1 cdb3b335253b9f2fb20bd1f9f1e94bb1f3ad409d
SHA512 abb94594e630084dbe7e1bcc4b1bd3dde6895ff584519e67765a94842e25e5acdf2f66264e21d0408ac10ca353369e18ce0b1b97e28fda9598f69c77bba32b00
SSDEEP 3072:wAKCfRW8JL1P3jjq9kq/1Rtp+1OsJ12tFzCzLDAz02P1+kvWhDiwPBqAZ:wAKCfRW8h1P3jjq9kq/1RtY1Om86zLDr
TLSH
T1E1045B06E7A251FAD1AFD078C4C38622FB7178545BE1AADB1B188A750F61BC4AF3D311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

42:ff:3e:72:dd:45:f5:e6:4c:34:d0:2f:40:e1:6e:9a:fb:49:e0:d5:cb:bf:e2:2e:95:f1:e5:a8:f5:b1:57:ac

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Beijing Kingsoft Security software Co.\,Ltd,O=Beijing Kingsoft Security software Co.\,Ltd,ST=Beijing,C=CN

Chains

Dec 28, 2021

CN=Beijing Kingsoft Security software Co.\,Ltd,O=Beijing Kingsoft Security software Co.\,Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Beijing Kingsoft Security software Co.\,Ltd,O=Beijing Kingsoft Security software Co.\,Ltd,ST=Beijing,C=CN

Serial Number

0b:69:00:5d:bc:45:70:12:e3:71:66:72:1c:4c:b0:eb

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 12, 2021 - Apr 20, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

78912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Build\Server\Server2026\x64\Release\D3dServer.pdb

kernel32

GetLastError GetDiskFreeSpaceExW LoadLibraryA lstrcatW GetSystemInfo K32GetModuleInformation HeapAlloc GetProcAddress DeleteCriticalSection ExitProcess GlobalMemoryStatusEx GetModuleHandleW WideCharToMultiByte GetSystemDirectoryW MapViewOfFile lstrcmpiW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection RtlLookupFunctionEntry RtlCaptureContext GetModuleHandleExW CreateFileW InitializeCriticalSectionEx GetSystemPowerStatus GetModuleFileNameW DeviceIoControl HeapFree VirtualProtect CloseHandle FreeLibrary EncodePointer Sleep OutputDebugStringA IsProcessorFeaturePresent VirtualQuery CreateFileMappingW GetCurrentProcess RtlUnwindEx TlsFree TlsSetValue TlsGetValue TlsAlloc lstrcpyW LocalFree LocalAlloc UpdateProcThreadAttribute DeleteProcThreadAttributeList InitializeProcThreadAttributeList TerminateProcess CreateEventW UnhandledExceptionFilter WaitForSingleObject GetProcessHeap SetLastError WaitForDebugEvent ContinueDebugEvent RaiseException OutputDebugStringW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId RtlVirtualUnwind GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceFrequency QueryPerformanceCounter

user32

EnumDisplayDevicesW

advapi32

RegOpenKeyExW CreateProcessAsUserW CreateWellKnownSid FreeSid RegCloseKey GetTokenInformation EqualSid AllocateAndInitializeSid OpenProcessToken

wevtapi

EvtNext EvtRender EvtClose EvtCreateRenderContext EvtQuery

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

msvcrt

?_set_new_mode@@YAHH@Z _commode _acmdln _ismbblead __set_app_type _XcptFilter _msize strcmp strlen __getmainargs abort calloc _errno _initterm _callnewh malloc free _aligned_malloc realloc _aligned_free atoi _wtoi towlower _local_unwind __DestructExceptionObject _amsg_exit __C_specific_handler memset memmove memcpy memcmp _CxxThrowException _initterm_e __CxxFrameHandler3 strcpy_s ?terminate@@YAXXZ _set_fmode wcslen

rpcrt4

RpcBindingFromStringBindingW RpcStringBindingComposeW RpcStringFreeW NdrAsyncClientCall RpcAsyncCompleteCall RpcAsyncInitializeHandle RpcRaiseException RpcBindingSetAuthInfoExW RpcBindingFree

ntdll

NtDuplicateObject NtRemoveProcessDebug NtQueryInformationProcess RtlAllocateHeap RtlFreeHeap DbgUiSetThreadDebugObject NtClose

Sharing

General

Malware Config

Signatures

File Explorer

2026.08.17裁员名单及补偿方案_SUTE.exe

PE Signature issue

kernel32

user32

advapi32

wevtapi

d3d11

d3dcompiler_47

msvcrt

rpcrt4

ntdll

generic