The ProjectZomboid64 exe File Malware Analysis

Technical Analysis

File Name	ProjectZomboid64.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-04 02:00:50 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	03ad1a2bcc6ce37083f7ea3d27d6c087
SHA1	d3ad5ac635f0b34ba84fe9039348c0046c09634c
SHA256	641d46245af0237fd2811fa9f63fa690f905c8ef531aa05e951441ba8678d1b9
SHA512	18749f91ab130782475290f73017f90e258336e4fba947130548726da61d565c6f7770004c6b8a4dfbc0a27d2f2431ebcd94683a630d9dc4729450541c5ddc21
ImpHash	874a21ef6825b6849d32bbbfebc58baa

PE Analysis

Basic Information

▼

Icon	Hash: 3598e628f4a8c831453d94bee1299f17 Fuzzy: cc8cea54f74315c1eba798cef6545639 dHash: b0f8aca1b1999ae8
Image Base	`0x140000000`
Entry Point	`0x14000d80c`
Compilation Time	2022-03-04 18:51:12
Checksum	0x00000000 (Actual: 0x000f2699)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	4 libraries steam_api64, KERNEL32, USER32, SHELL32
Exports	0 functions
Resources	11 Resources
Sections	6 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	197,424 bytes	197,632 bytes	6.47 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`24F45F5B41C1347E6ADAA793A2D60620`
`.rdata`	`0x00032000`	91,310 bytes	91,648 bytes	5.08 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5ADC037C75786846E22D884DE88CED9A`
`.data`	`0x00049000`	11,468 bytes	5,120 bytes	2.95 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CC16BDF0A23F5BD6128AFC94E281E5E3`
`.pdata`	`0x0004c000`	10,344 bytes	10,752 bytes	5.30 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`65FCDAB43DA4E2EEA3889DAA4582E037`
`.rsrc`	`0x0004f000`	682,264 bytes	682,496 bytes	6.58 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C24D5DDCFF8D0637E1BC822BFE17656C`
`.reloc`	`0x000f6000`	3,308 bytes	3,584 bytes	5.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`17F32F92D8EDD89DE6018F0A820D08EF`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 11 (681,633 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	9	679,918 bytes	99.7%
RT_GROUP_ICON	1	132 bytes	0%
RT_MANIFEST	1	1,583 bytes	0.2%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The ProjectZomboid64.exe File Analysis