diff --git a/patches/@electron+windows-sign+1.2.2.patch b/patches/@electron+windows-sign+1.2.2.patch
new file mode 100644
index 0000000..a7db431
--- /dev/null
+++ b/patches/@electron+windows-sign+1.2.2.patch
@@ -0,0 +1,15 @@
+diff --git a/node_modules/@electron/windows-sign/dist/cjs/files.js b/node_modules/@electron/windows-sign/dist/cjs/files.js
+index 59a370e..27f9bbd 100644
+--- a/node_modules/@electron/windows-sign/dist/cjs/files.js
++++ b/node_modules/@electron/windows-sign/dist/cjs/files.js
+@@ -49,6 +49,10 @@ function getFilesToSign(options, dir) {
+     }
+     for (const file of files) {
+         const fullPath = path_1.default.resolve(dir, file);
++        // windows95 patch: skip 16-bit guest binaries that signtool can't sign
++        if (/[\\/]guest-tools[\\/]/i.test(fullPath)) {
++            continue;
++        }
+         if (fs_extra_1.default.statSync(fullPath).isDirectory()) {
+             // If it's a directory, recurse
+             result.push(...getFilesToSign(options, fullPath));