MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

issuer: /CN=Root Agency
serial: 296C90984E7D96BD4D7967916C53DB8C

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:90:98:4e:7d:96:bd:4d:79:67:91:6c:53:db:8c
        Signature Algorithm: md5WithRSAEncryption
        Issuer: CN=Root Agency
        Validity
            Not Before: Feb 13 15:44:12 2002 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=Joe's-Software-Emporium
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (512 bit)
                Modulus:
                    00:f7:ee:c7:ff:94:8a:00:d6:15:ec:a9:c4:4b:b5:
                    b4:50:6c:39:fd:bd:1a:d8:42:3e:ad:2c:96:f7:44:
                    78:11:51:b8:03:52:b1:49:a8:37:73:c2:2e:80:8a:
                    0f:d3:31:cf:28:d7:74:c0:44:64:df:cf:f4:4b:ae:
                    0e:b2:b7:f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
    Signature Algorithm: md5WithRSAEncryption
         4c:22:54:c2:e7:99:5b:5b:57:26:eb:64:e6:1d:c5:b1:84:ef:
         42:9b:a1:96:e1:7a:9b:dd:7d:30:de:86:f6:ae:01:02:61:eb:
         b6:8d:5c:a8:43:7d:0f:f4:22:20:cd:56:da:d4:5f:23:48:d3:
         e3:15:27:cd:00:5f:98:f5:cb:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 16 73 d3 92 9b a8 57 5c  7d b1 0c d3 70 d6 20 b6  |.s....W\}...p. .|
            58 bf 25 11                                       |X.%.            |
    • #2
      • 2
        • 29:6C:90:98:4E:7D:96:BD:4D:79:67:91:6C:53:DB:8C
        • RSA-MD5: nil
        • CN: Root Agency
        • 2002-02-13 15:44:12 UTC: 2039-12-31 23:59:59 UTC
        • CN: Joe's-Software-Emporium
        • #5
          • rsaEncryption: nil
          • F7:EE:C7:FF:94:8A:00:D6:15:EC:A9:C4:4B:B5:B4:50:
            6C:39:FD:BD:1A:D8:42:3E:AD:2C:96:F7:44:78:11:51:
            B8:03:52:B1:49:A8:37:73:C2:2E:80:8A:0F:D3:31:CF:
            28:D7:74:C0:44:64:DF:CF:F4:4B:AE:0E:B2:B7:F5:D1
            : 0x010001
        • 2.5.29.1
          • 12 e4 09 2d 06 1d 1d 4f  00 8d 61 21 dc 16 64 63  |...-...O..a!..dc|
            • CN: Root Agency
            • 06 37 6c 00 aa 00 64 8a  11 cf b8 d4 aa 5c 35 f4  |.7l...d......\5.|
      • RSA-MD5:
        4c 22 54 c2 e7 99 5b 5b  57 26 eb 64 e6 1d c5 b1  |L"T...[[W&.d....|
        84 ef 42 9b a1 96 e1 7a  9b dd 7d 30 de 86 f6 ae  |..B....z..}0....|
        01 02 61 eb b6 8d 5c a8  43 7d 0f f4 22 20 cd 56  |..a...\.C}.." .V|
        da d4 5f 23 48 d3 e3 15  27 cd 00 5f 98 f5 cb d3  |.._#H...'.._....|
    • 1
      • #0
        • CN: Root Agency
        • 29:6C:90:98:4E:7D:96:BD:4D:79:67:91:6C:53:DB:8C
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest:
          b3 0c 17 80 f5 19 f3 75  f5 e6 67 82 26 c8 90 a0  |.......u..g.&...|
          0f 9c db 8f                                       |....            |
      • rsaEncryption:
        ef 2a 11 e6 31 0b d8 2c  38 16 1e eb 39 e3 dc 1c  |.*..1..,8...9...|
        b8 63 f6 43 82 f7 f1 98  fc cd af f3 e8 14 73 87  |.c.C..........s.|
        6b 30 93 58 f4 9f 75 4c  50 fe f0 0f 86 50 5b 34  |k0.X..uLP....P[4|
        8e 97 aa 38 a5 7f b2 59  29 40 d5 63 ba 6c 88 e5  |...8...Y)@.c.l..|
offsetsizetypecomment
01707008DLL08/16/2011 23:27:46#
15c115HTM#
1a0c00784PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK