HelloWorld_GCC44_IA32

info
MZ
PE
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	HelloWorld_GCC44_IA32 - signed.efi
size	13368 (0x3438)
md5	3917dfb8f1ee9359695733409a6490c2

type	MS-DOS executable PE32 executable (EFI application) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0
num_relocs	0
header_paragraphs	0
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 4d 5a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |MZ..............|
00000010: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 80 00 00 00  |................|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000080:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	0.0
SizeOfCode	0x2a20
SizeOfInitializedData	0xa0
SizeOfUninitializedData	0
AddressOfEntryPoint	0x240
BaseOfCode	0x240
BaseOfData	0x2c60
ImageBase	0
SectionAlignment	0x20
FileAlignment	0x20
OperatingSystemVersion	0.0
ImageVersion	0.0
SubsystemVersion	0.0
Reserved1	0
SizeOfImage	0x2f00
SizeOfHeaders	0x240
CheckSum	0xafbf
Subsystem	0xa
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0
SizeOfHeapCommit	0
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x240	0x2a20	0x2a20	R-X CODE
.data	0x2c60	0xa0	0xa0	RW- IDATA
.reloc	0x2d00	0x140	0x140	R-- IDATA DISCARDABLE
.debug	0x2e40	0xc0	0xc0	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0	0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x2f00	0x538
BASERELOC	0x2d00	0x140
DEBUG	0x2e40	0xc0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=PkRoot

serial: 7108B9CD1CFEE88745C9133BBB7E68CD

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:b9:cd:1c:fe:e8:87:45:c9:13:3b:bb:7e:68:cd
        Signature Algorithm: sha1WithRSA
        Issuer: CN=PkRoot
        Validity
            Not Before: Mar 27 21:27:36 2012 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=KekRoot
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:14:ea:0f:8b:93:d5:03:98:85:2d:8b:c6:
                    bf:aa:17:54:62:78:a2:1f:09:97:be:4e:18:dd:ed:
                    d5:ad:2b:bb:64:96:55:82:a4:d4:20:13:ee:4d:c3:
                    71:6e:fc:58:cd:ff:36:79:f3:78:c6:33:45:73:3f:
                    ac:30:27:9c:ca:56:d9:42:e5:97:39:68:a2:21:21:
                    fe:fb:06:c0:4a:4c:0b:b6:18:82:73:73:51:3b:ac:
                    38:3f:b3:eb:12:37:e3:c1:25:e2:b6:90:bf:0b:b5:
                    83:5a:23:fa:e4:e0:15:2b:41:ce:e8:2a:c6:dc:e7:
                    05:6a:1b:77:b8:5f:b7:6f:ff:1b:fa:42:ad:69:9d:
                    37:01:d6:18:81:0e:39:c7:56:44:87:3a:64:8c:93:
                    04:7f:fc:fc:0d:2c:12:39:8f:41:58:9a:55:25:4d:
                    6b:f8:5f:7d:81:48:8d:6d:f5:71:c3:2d:d2:05:91:
                    a2:2d:19:10:ee:66:81:ae:65:8b:0e:5c:c6:e9:eb:
                    e4:54:e0:15:b1:bd:e7:6d:c5:a2:fc:9a:3e:05:11:
                    4d:3f:63:a2:6e:3b:d5:68:03:55:3c:8f:a6:59:ef:
                    9d:f6:79:34:d5:46:bb:40:40:13:95:d1:29:20:0b:
                    c1:de:6d:f6:71:14:26:04:54:09:1b:a7:51:a9:83:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                09..Ux......nM1!..5e..0.1.0..U....PkRoot..tp[...z.A.F...D.
    Signature Algorithm: sha1WithRSA
         9b:ef:49:36:b3:43:43:34:95:89:a5:05:7d:fa:4a:02:ed:ea:
         62:49:b0:81:d8:27:13:c8:4f:2b:b8:2b:18:8a:d5:8d:be:a5:
         48:72:2f:57:f3:6e:92:c2:86:2c:46:a3:a1:c5:a9:6f:be:d2:
         43:90:58:2e:62:54:6c:a6:03:0a:53:c4:6b:8d:11:de:26:bf:
         7c:2d:1a:e8:05:21:11:1a:ac:d3:30:17:bd:b3:2b:fa:b6:43:
         31:50:f3:b7:11:11:25:ef:e9:38:ae:ff:89:19:ed:91:3a:fc:
         00:59:9b:14:96:f9:c0:91:16:81:87:01:79:7b:87:67:2a:b8:
         57:f8:ff:7c:cb:89:33:a1:0f:2d:55:ba:e9:f8:ef:e6:a4:99:
         e1:0f:cc:24:db:72:91:d3:23:4d:db:82:87:0b:0a:71:4a:fd:
         75:74:3c:5d:54:1d:dd:0b:27:50:fc:0d:37:55:3b:7f:b4:41:
         f8:60:ac:d3:9d:2d:a3:c6:f5:45:46:99:6d:03:20:e1:ee:c1:
         77:79:00:d0:66:56:9d:43:73:43:b3:d3:ee:b4:99:96:08:0b:
         15:05:1b:94:61:ba:ce:34:03:ed:58:8e:ec:3d:20:20:29:a6:
         35:c9:3b:84:3f:e8:5b:89:ef:63:47:e8:8f:81:9c:13:4b:6d:
         7b:74:ee:3a

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

1e f9 fe 3c 30 45 8f c3 a4 f9 3b 4b 80 eb f7 a3 |...<0E....;K....| 05 da 93 17 6f e6 8f 1d ef f1 ad 05 62 a6 be d1 |....o.......b...|

2
- 71:08:B9:CD:1C:FE:E8:87:45:C9:13:3B:BB:7E:68:CD
- RSA-SHA1-2: nil
- CN: PkRoot
- 2012-03-27 21:27:36 UTC: 2039-12-31 23:59:59 UTC
- CN: KekRoot
- #5
  - rsaEncryption: nil
  - B6:96:14:EA:0F:8B:93:D5:03:98:85:2D:8B:C6:BF:AA:
    17:54:62:78:A2:1F:09:97:BE:4E:18:DD:ED:D5:AD:2B:
    BB:64:96:55:82:A4:D4:20:13:EE:4D:C3:71:6E:FC:58:
    CD:FF:36:79:F3:78:C6:33:45:73:3F:AC:30:27:9C:CA:
    56:D9:42:E5:97:39:68:A2:21:21:FE:FB:06:C0:4A:4C:
    0B:B6:18:82:73:73:51:3B:AC:38:3F:B3:EB:12:37:E3:
    C1:25:E2:B6:90:BF:0B:B5:83:5A:23:FA:E4:E0:15:2B:
    41:CE:E8:2A:C6:DC:E7:05:6A:1B:77:B8:5F:B7:6F:FF:
    1B:FA:42:AD:69:9D:37:01:D6:18:81:0E:39:C7:56:44:
    87:3A:64:8C:93:04:7F:FC:FC:0D:2C:12:39:8F:41:58:
    9A:55:25:4D:6B:F8:5F:7D:81:48:8D:6D:F5:71:C3:2D:
    D2:05:91:A2:2D:19:10:EE:66:81:AE:65:8B:0E:5C:C6:
    E9:EB:E4:54:E0:15:B1:BD:E7:6D:C5:A2:FC:9A:3E:05:
    11:4D:3F:63:A2:6E:3B:D5:68:03:55:3C:8F:A6:59:EF:
    9D:F6:79:34:D5:46:BB:40:40:13:95:D1:29:20:0B:C1:
    DE:6D:F6:71:14:26:04:54:09:1B:A7:51:A9:83:DF:AD: 0x010001
- 2.5.29.1
  - 55 78 b4 17 89 c4 ba 87 6e 4d 31 21 fb 88 35 65 |Ux......nM1!..5e|
    - CN: PkRoot
    - 74 70 5b dd d2 fe 7a 9f 41 f3 46 2e fe 90 44 e4 |tp[...z.A.F...D.|

RSA-SHA1-2:

9b ef 49 36 b3 43 43 34  95 89 a5 05 7d fa 4a 02  |..I6.CC4....}.J.|
ed ea 62 49 b0 81 d8 27  13 c8 4f 2b b8 2b 18 8a  |..bI...'..O+.+..|
d5 8d be a5 48 72 2f 57  f3 6e 92 c2 86 2c 46 a3  |....Hr/W.n...,F.|
a1 c5 a9 6f be d2 43 90  58 2e 62 54 6c a6 03 0a  |...o..C.X.bTl...|
53 c4 6b 8d 11 de 26 bf  7c 2d 1a e8 05 21 11 1a  |S.k...&.|-...!..|
ac d3 30 17 bd b3 2b fa  b6 43 31 50 f3 b7 11 11  |..0...+..C1P....|
25 ef e9 38 ae ff 89 19  ed 91 3a fc 00 59 9b 14  |%..8......:..Y..|
96 f9 c0 91 16 81 87 01  79 7b 87 67 2a b8 57 f8  |........y{.g*.W.|
ff 7c cb 89 33 a1 0f 2d  55 ba e9 f8 ef e6 a4 99  |.|..3..-U.......|
e1 0f cc 24 db 72 91 d3  23 4d db 82 87 0b 0a 71  |...$.r..#M.....q|
4a fd 75 74 3c 5d 54 1d  dd 0b 27 50 fc 0d 37 55  |J.ut<]T...'P..7U|
3b 7f b4 41 f8 60 ac d3  9d 2d a3 c6 f5 45 46 99  |;..A.`...-...EF.|
6d 03 20 e1 ee c1 77 79  00 d0 66 56 9d 43 73 43  |m. ...wy..fV.CsC|
b3 d3 ee b4 99 96 08 0b  15 05 1b 94 61 ba ce 34  |............a..4|
03 ed 58 8e ec 3d 20 20  29 a6 35 c9 3b 84 3f e8  |..X..=  ).5.;.?.|
5b 89 ef 63 47 e8 8f 81  9c 13 4b 6d 7b 74 ee 3a  |[..cG.....Km{t.:|

#0
- CN: PkRoot
- 71:08:B9:CD:1C:FE:E8:87:45:C9:13:3B:BB:7E:68:CD
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

cf 2f de fc 56 42 bf 52  ab 88 5c 6c dc 4a e2 0b  |./..VB.R..\l.J..|
ae ec d0 73 b9 c7 52 c9  9e 7d 77 02 bf ab c4 c4  |...s..R..}w.....|

rsaEncryption:

1c 9d c0 81 69 56 68 c1  62 df c9 ba dc 58 76 ef  |....iVh.b....Xv.|
3d 1d 0c 15 1f 78 b3 04  41 07 ca 38 e1 78 52 d9  |=....x..A..8.xR.|
f5 28 b9 d7 58 78 db 9f  8f 68 43 66 34 8f 31 2c  |.(..Xx...hCf4.1,|
37 c2 21 72 b7 af f9 cb  be f2 d9 95 27 06 ec 4d  |7.!r........'..M|
b3 62 2a cf dd 5f dc 49  44 15 2d 57 e3 b2 ca fc  |.b*.._.ID.-W....|
7b da dd 67 32 67 7b df  36 11 de 20 48 91 6c 43  |{..g2g{.6.. H.lC|
6f 18 96 45 a3 42 dc f3  2f 02 45 10 1b af 20 51  |o..E.B../.E... Q|
a4 ac eb 78 e8 e7 e3 93  3a d2 22 46 ef a8 1c 73  |...x....:."F...s|
48 34 20 5b f6 4f ce 20  3f 3f 66 31 f1 70 cc d7  |H4 [.O. ??f1.p..|
2e c1 e8 37 71 97 50 c5  d5 5d 47 7a 5a 63 84 25  |...7q.P..]GzZc.%|
e5 5d a2 e6 57 43 e8 e7  fc 4f e3 25 20 2e 9a 81  |.]..WC...O.% ...|
74 54 2f ca 9c d5 80 44  1c b9 f4 02 ee 22 c9 ae  |tT/....D....."..|
0d 21 0f 6b a4 e2 e7 b2  e2 33 7c 88 1c 08 a8 3c  |.!.k.....3|....<|
8a f4 65 8a 64 27 0c 83  e4 b8 1e b1 0b 97 f0 13  |..e.d'..........|
a4 f1 f3 6e 1f fc 18 89  35 12 7c 3b c2 e0 98 4c  |...n....5.|;...L|
d1 ba 03 e3 8b 06 29 ad  53 7b 9a 96 f2 6c 97 af  |......).S{...l..|

show previews

offset	size	type	comment
0	12032	EXE	01/01/1970 00:00:00	#
15c1	15	HTM		#
2f00	1336	PKCS7	Authenticode Signature	#

Scanning the drive for archives:
1 file, 13368 bytes (14 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

HelloWorld_GCC44_IA32 - signed.efi