The xenia exe File Malware Analysis

Technical Analysis

File Name	xenia.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-11 20:00:35 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	9396ba92afb4f495c0776a3f1ddee4d3
SHA1	4443b34b8168285269a82d934a10bfebdb998440
SHA256	c78157ce7aeceb2b6c0c022595e775215c9f19167cb95f9517fa45cfa2400b1e
SHA512	ba8c4c67c6bdce7fe752fa04c1978fa71d622e83f98525cfaa9ca8d26ba9377352f29f06aca71411be79238760cf7a8feeef290b6a631ea7c3ae3e2b6a4df1f4
ImpHash	7b016b01d3615c278c0d661e657ef550

PE Analysis

Basic Information

▼

Icon	Hash: 39859f721398d6a2638c8e3c819a36de Fuzzy: 16af226d2359731df6b5fa65cdf5c105 dHash: 1031e8b28ecc710e
Image Base	`0x140000000`
Entry Point	`0x1405557c8`
Compilation Time	2025-08-20 11:34:27
Checksum	0x00000000 (Actual: 0x00b0498e)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`C:\projects\xenia\build\bin\Windows\Release\xenia.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	31 libraries
Exports	2 functions
Resources	10 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	5,886,139 bytes	5,886,464 bytes	6.54 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8CBA82B5BC0A7046974A2D3F1106F460`
`.rdata`	`0x0059f000`	4,846,790 bytes	4,847,104 bytes	4.18 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`95678C3429BA558094A6C8F2FB3581B5`
`.data`	`0x00a3f000`	6,329,160 bytes	402,432 bytes	3.61 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FCC98915223C0466719EB12E9D66613B`
`.pdata`	`0x01049000`	237,660 bytes	238,080 bytes	6.35 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`F60586BEA16B920F239CE4E0F0A40F41`
`_RDATA`	`0x01084000`	48 bytes	512 bytes	0.25 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FC2F14D81E335AD78FD3A2189AF093B9`
`.rsrc`	`0x01085000`	107,512 bytes	107,520 bytes	7.71 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`58B0FF32789A441EC38E31F3311379B5`
`.reloc`	`0x010a0000`	37,128 bytes	37,376 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`6D84E714342506CE5E85235F755004BD`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 10 (106,887 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	8	104,823 bytes	98.1%
RT_GROUP_ICON	1	118 bytes	0.1%
RT_MANIFEST	1	1,946 bytes	1.8%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The xenia.exe File Analysis