2026[.]裁员名单及补偿方案WPS[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2026.裁员名单及补偿方案WPS.exe
Size 330KB
Sample260908-gv4sysdc78
SHA256 81b4014ba47f755252101d3d265ec25c7b0b7cefa6e886b98a4e6d4eccfe33e4
MD5 3f7308e9c5e6e431b7fa3c70cfc0b388
SHA1 c4c44c926ed8eb9b8dee5b1e816e13c24ddef076
SHA512 8c814424f4911f8d7d65762e22ad2a412afd3f74ea8b0ebcb70a9f0af3a1d2d7b72ad51a201b09a1a5ba4f4835a713060dcdad01945ed1b92993549eeb144417
SSDEEP 6144:RxsGT8lWxG1Q+Ki0TcOtzRThp4tNWSATo:Ti24t0SAU
TLSH
T178743C0BFB4167BAD1AEA27444C75335B731BC292BF246CB2F8441151EE33887E35AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026.裁员名单及补偿方案WPS.exe

File Explorer

2026.裁员名单及补偿方案WPS.exe

.exe 330KB

2026.裁员名单及补偿方案WPS.exe

IMPHASH 57482a3c5df2d0fcd7746553c67c804f
SHA256 81b4014ba47f755252101d3d265ec25c7b0b7cefa6e886b98a4e6d4eccfe33e4
MD5 3f7308e9c5e6e431b7fa3c70cfc0b388
SHA1 c4c44c926ed8eb9b8dee5b1e816e13c24ddef076
SHA512 8c814424f4911f8d7d65762e22ad2a412afd3f74ea8b0ebcb70a9f0af3a1d2d7b72ad51a201b09a1a5ba4f4835a713060dcdad01945ed1b92993549eeb144417
SSDEEP 6144:RxsGT8lWxG1Q+Ki0TcOtzRThp4tNWSATo:Ti24t0SAU
TLSH
T178743C0BFB4167BAD1AEA27444C75335B731BC292BF246CB2F8441151EE33887E35AA5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

63:79:56:62:f5:2c:62:f4:68:ad:85:f0:d1:fc:00:54:21:0a:b2:5f:25:3a:33:18:8a:48:47:82:5f:72:2b:b2

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Tencent Technology (Shenzhen) Company Limited,O=Tencent Technology (Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Chains

Feb 26, 2024

CN=Tencent Technology (Shenzhen) Company Limited,O=Tencent Technology (Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Tencent Technology (Shenzhen) Company Limited,O=Tencent Technology (Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Tencent Technology (Shenzhen) Company Limited,O=Tencent Technology (Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Serial Number

0d:da:f2:fe:51:f3:b2:e9:4c:bb:69:5a:4a:51:74:fc

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 18, 2022 - Oct 17, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

75976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

kernel32

InitializeCriticalSectionAndSpinCount LocalFree CreateFileW CloseHandle DuplicateHandle HeapAlloc HeapReAlloc HeapFree GetProcessHeap Sleep GetCurrentProcess ExitProcess CreateProcessW GetProcessId GetSystemDirectoryW VirtualProtect VirtualAllocEx WriteProcessMemory CreateFileMappingW MapViewOfFile UnmapViewOfFile FreeLibrary GetModuleFileNameW lstrcmpiW lstrcatW QueryPerformanceCounter QueryPerformanceFrequency InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetDiskFreeSpaceExW DeviceIoControl GlobalMemoryStatusEx IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA EncodePointer DecodePointer GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError lstrcpyW CreateEventW TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetCurrentThreadId GetFileType DeleteCriticalSection GetModuleFileNameA GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwindEx LoadLibraryExW OutputDebugStringW LCMapStringW HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW ContinueDebugEvent WaitForDebugEvent WaitForSingleObject InitializeProcThreadAttributeList DeleteProcThreadAttributeList UpdateProcThreadAttribute LocalAlloc

Sharing

General

Malware Config

Signatures

File Explorer

2026.裁员名单及补偿方案WPS.exe

PE Signature issue

d3d11

kernel32

generic