The xenia canary exe File Malware Analysis

Technical Analysis

File Name	xenia_canary.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.209.174
Database Version	2025-03-01 11:00:30 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	a22b2829df584c377ffc98038cff940c
SHA1	3274b1efe16d41c7ca0a6d5f76e9bf8bbc665938
SHA256	461069353ca25212724727fe6ba8b5506311cfb287739110e89cf732267e99ab
SHA512	959c1fad013beef1a4d50f811290b8d103d4e8e3e1ee3c6a1639a2a504e9cbcee6a0ecea1f3a31b7e33a042642222f7f6512c21d1978640237d8cb8374ac47f6
ImpHash	2a09b8f3bc08455c54e7e22ecf2a3393

PE Analysis

Basic Information

▼

Icon	Hash: bb624018a06a71100e4e5f43e18c705c Fuzzy: 16af226d2359731df6b5fa65cdf5c105 dHash: 1032e8b2aacc710e
Image Base	`0x140000000`
Entry Point	`0x140763010`
Compilation Time	2025-02-07 08:19:17
Checksum	0x00000000 (Actual: 0x00e563c9)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\a\xenia-canary\xenia-canary\build\bin\Windows\Release\xenia_canary.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	32 libraries
Exports	2 functions
Resources	10 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	8,305,307 bytes	8,305,664 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AFAA29DDBC1DD773D05C89989F3F498C`
`.cold`	`0x007ed000`	91,888 bytes	92,160 bytes	6.05 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BA583799908B896A44C659A508F85867`
`.rdata`	`0x00804000`	5,943,880 bytes	5,944,320 bytes	3.88 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`0D013F74547C3D64F63AD5E0189E6272`
`.data`	`0x00db0000`	6,216,049 bytes	168,960 bytes	4.58 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`33529C58F96989C6DF0DA381E2D5CB33`
`.pdata`	`0x0139e000`	266,628 bytes	266,752 bytes	6.50 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`42007545308FDDECC2590929FFFF5A11`
`.rsrc`	`0x013e0000`	169,864 bytes	169,984 bytes	7.92 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`59165441B58E5E3AAFDCE3B5E066DC30`
`.reloc`	`0x0140a000`	42,508 bytes	43,008 bytes	5.80 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`33A881465B8584C3058C05B47F80AE7A`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 10 (169,232 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	8	167,168 bytes	98.8%
RT_GROUP_ICON	1	118 bytes	0.1%
RT_MANIFEST	1	1,946 bytes	1.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The xenia_canary.exe File Analysis