standard.exe - a "standard" PE

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	standard.exe
size	10880 (0x2a80)
md5	469cda821f1d466e05f2051d85546ce5

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xb0

Rich Header

lib id	version	times used
19	8078	7
18	8444	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	1
TimeDateStamp	0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	3.0
SizeOfCode	0
SizeOfInitializedData	0
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2a95
BaseOfCode	0
BaseOfData	0
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	0.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x5000
SizeOfHeaders	0x1d0
CheckSum	0x8221
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0
SizeOfHeapCommit	0
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
	0x1000	0x4000	0x2000	-WX

Data Directory

type	va	size
EXPORT	0x2dc0	0x130
IMPORT	0x2c40	0
RESOURCE	0x1000	0
EXCEPTION	0x2f90	0xc
SECURITY	0x2200	0x880
BASERELOC	0x2fb0	0xa
DEBUG	0	0
ARCHITECTURE	0x2da0	0x14
GLOBALPTR	0	0
TLS	0x2ef0	0
LOAD_CONFIG	0x2f20	0x40
Bound_IAT	0	0
IAT	0x2d30	0x30
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0	0	0x402a96	0x402f10	0	0

show previews

type	name	size
ICON	#1576	5672
STRING	#10	76
GROUP_ICON	#788	20
VERSION	#1	452
MANIFEST	#1	74

id	lang	string
150	0	- RT_STRING resource loaded

module_name	hint	ord	function_name
kernel32.dll			ExitProcess
kernel32.dll			CreateActCtxA
msvcrt.dll			printf
user32.dll			LoadIconA
user32.dll			LoadStringA
standard.exe			export

ord	entry_va	function_name
0	0x2e30	ExitProcess
1	0x2e42	LoopHere
2	0x2e59	LoopOnceAgain
3	0x2e67	GroundHogDay
4	0x2e8b	Ying
5	0x2e7d	Yang
6	0x2aa1	export

module_name
flags	0
timestamp	0
version	0.0
ordinal_base	0
nFunctions	7
nNames	7
Names(7)	0x2e10
Functions(7)	0x2df0
NameOrdinals(7)	0x2ea0

StringTable 00000000

FileDescription	a "standard" PE
FileVersion	required for Tab display under XP
LegalCopyright	corkami.com

VS_FIXEDFILEINFO

FileVersion	128.0.0.1
ProductVersion	0.0.0.0
StrucVersion	0
FileFlagsMask	0
FileFlags	0
FileOS	0
FileType	0
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=AU/ST=Some-State/O=Internet Widgits Pty Ltd

serial: 01

Certificates (1)

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd
        Validity
            Not Before: Feb  7 09:10:26 2011 GMT
            Not After : Feb  6 09:10:26 2013 GMT
        Subject: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, OU=code signing
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ce:9e:d8:9d:cd:48:46:75:e0:e1:e7:29:00:90:
                    f5:3f:60:6c:e2:6e:30:35:61:5b:71:19:99:15:17:
                    08:8e:a5:90:77:dc:a8:d2:b9:9a:2b:5c:43:4e:f8:
                    84:43:e8:cb:0a:6f:dd:24:a9:dc:bb:0a:9c:73:7d:
                    ff:68:18:8a:22:be:e5:24:cd:0a:72:08:a3:1d:57:
                    0f:68:7f:e2:67:ec:71:17:bb:e6:66:11:f3:8d:f3:
                    62:55:95:7b:ff:57:86:50:cf:70:6a:3b:5e:7d:14:
                    4a:67:66:0f:ac:77:8d:64:22:7d:5b:88:c5:21:ee:
                    20:d5:8b:1d:61:b9:18:7d:00:4a:e0:a0:67:9b:ee:
                    78:42:4c:4a:ad:09:e1:ca:54:4f:46:4d:b5:55:29:
                    20:be:d0:3b:56:20:a9:30:d5:c9:3a:54:f2:b9:fb:
                    86:4e:d9:1f:56:d5:5d:7f:86:b6:a7:bf:70:9f:16:
                    d2:5f:2b:fa:a0:d9:b0:82:1c:b4:40:84:04:cc:c1:
                    3e:c0:27:75:c4:d5:1a:32:15:53:06:7c:46:df:b5:
                    4a:ae:0b:aa:02:00:f7:dd:d6:7b:21:ee:a2:a3:1a:
                    ad:fd:fc:34:39:a8:46:1c:76:09:b7:85:97:4d:3c:
                    f1:12:69:4e:8d:99:9a:05:6a:79:e3:ed:73:47:1d:
                    62:b3:7b:83:7a:82:d2:1f:b9:36:a8:e5:41:2b:5c:
                    2b:a0:ab:2c:4f:ab:2e:ff:87:74:2d:d0:24:b8:6b:
                    9e:73:87:e6:f2:6d:29:84:3e:5b:a3:b2:47:c2:14:
                    5d:1c:31:33:65:6a:77:f5:96:19:cd:f7:c5:41:9e:
                    0b:fb:38:93:58:34:2a:9f:17:9f:01:75:73:bf:b3:
                    64:bf:b6:b6:4c:ac:fc:10:28:e8:a6:ab:bf:76:29:
                    aa:e9:89:1f:20:de:b9:b5:f5:9a:8f:45:8e:33:12:
                    ee:b6:02:51:a4:6a:86:b1:1f:55:62:4c:2d:7f:54:
                    42:9e:f8:ea:96:81:53:40:92:94:eb:64:a4:a2:f6:
                    9e:fc:29:80:f1:eb:00:c6:8c:e1:48:30:9d:12:cf:
                    04:ef:58:94:43:ce:99:c6:0a:70:70:3c:9b:2f:58:
                    a0:a4:a8:a4:18:ab:ff:81:2c:c9:3f:00:93:c1:6a:
                    8a:9d:1d:ce:db:78:5b:d2:be:52:f3:35:b2:55:79:
                    39:11:2d:18:a9:83:6d:f6:32:79:45:1c:f2:98:6d:
                    70:69:86:e8:1c:fa:a4:60:9f:4e:fd:10:7c:42:04:
                    cd:bb:58:d5:4a:53:d1:95:86:3b:ab:0b:9d:bc:4a:
                    18:8d:0b:79:76:59:4a:05:e8:b8:87:2d:d5:3c:8b:
                    a3:01:af
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
         82:2c:26:eb:5a:3e:98:6c:a1:23:74:be:76:ef:fb:14:97:ba:
         e3:74:56:db:84:8c:8d:1c:1c:f7:a7:1d:ce:69:2e:5b:cd:72:
         f0:e4:ad:14:86:c1:80:6d:32:da:57:e5:55:97:9b:74:5c:90:
         4d:ad:2f:31:d3:28:fb:98:01:68:48:08:04:a9:83:c2:25:2f:
         30:88:2b:ca:96:33:34:84:7a:a5:34:59:26:2a:9a:dd:cf:db:
         e8:5d:86:ed:f7:a4:2e:22:55:e3:a3:fc:97:0d:1e:f1:46:22:
         2b:df:ff:c6:12:b8:07:55:58:92:e5:79:60:78:83:42:a8:1d:
         1a:ad:4f:a2:bb:9c:b5:1b:0c:42:10:83:a3:eb:b6:2b:5e:78:
         6f:b4:aa:60:01:00:8a:10:71:d6:6d:c9:31:39:51:92:a2:e1:
         3c:93:87:9f:bc:26:87:5e:ad:c8:59:f9:91:7f:54:50:62:48:
         5d:b6:4b:4a:5c:6f:b9:24:db:21:77:07:cd:da:5f:27:2c:93:
         70:f0:fe:5f:f5:5c:0b:1a:62:22:c4:f1:d8:ca:a5:0c:4a:d7:
         ad:98:97:bc:f2:63:85:29:52:bf:37:d6:52:f0:11:1e:1d:30:
         f0:4d:0a:f1:ca:e0:c2:35:f4:be:91:be:21:c4:7e:e4:dc:23:
         b7:71:2d:29:79:ce:9a:b8:32:22:3c:fd:95:af:51:c9:71:2b:
         e3:e4:fe:ae:fc:b8:ef:13:70:90:22:8d:93:93:06:19:21:24:
         5f:39:07:35:d5:35:0a:92:58:56:1a:bc:2c:ed:d0:c9:c7:c0:
         12:04:6e:c2:48:1e:01:a2:7f:88:bf:b0:5c:7f:c0:49:cf:1d:
         ff:e6:23:0e:ae:65:01:3c:aa:11:44:80:be:b0:2c:69:8d:d3:
         8f:e6:35:6c:4b:42:70:8b:cb:52:9e:dc:ee:46:ae:16:ca:7d:
         32:1c:0a:21:33:b5:06:08:4a:4c:d7:f8:f8:6c:a8:ff:02:02:
         19:cc:dc:bf:2d:0b:ac:5a:a4:2d:ff:84:2d:db:0a:7c:f0:c8:
         0e:db:74:ca:d6:64:ba:88:36:86:4b:1e:9e:eb:7a:db:f9:7e:
         60:54:87:ad:19:4c:a3:73:e3:fe:99:1c:db:de:b1:d5:5f:3e:
         e7:d2:af:db:22:1a:37:d5:04:4e:38:bf:f1:f7:f9:55:8a:c7:
         5d:e0:71:64:18:48:76:3f:ae:62:c4:2b:e5:08:d4:44:cf:a2:
         2b:e2:bd:d8:b2:3c:5f:3a:6a:e7:f4:9a:ea:35:e9:74:87:36:
         d9:5a:72:9f:82:d0:45:5d:5e:b0:3c:31:48:2d:4a:4c:39:82:
         5a:55:02:3e:4f:4d:32:6f

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

8e 29 f3 50 b6 eb 22 9f 16 23 cd de a9 ea d7 95 |.).P.."..#......| e9 b8 2e 84 |.... |

1
- RSA-SHA1: nil
- #1
  - C: AU
  - ST: Some-State
  - O: Internet Widgits Pty Ltd
- 2011-02-07 09:10:26 UTC: 2013-02-06 09:10:26 UTC
- #3
  - C: AU
  - ST: Some-State
  - O: Internet Widgits Pty Ltd
  - OU: code signing
- #4
  - rsaEncryption: nil
  - CE:9E:D8:9D:CD:48:46:75:E0:E1:E7:29:00:90:F5:3F:
    60:6C:E2:6E:30:35:61:5B:71:19:99:15:17:08:8E:A5:
    90:77:DC:A8:D2:B9:9A:2B:5C:43:4E:F8:84:43:E8:CB:
    0A:6F:DD:24:A9:DC:BB:0A:9C:73:7D:FF:68:18:8A:22:
    BE:E5:24:CD:0A:72:08:A3:1D:57:0F:68:7F:E2:67:EC:
    71:17:BB:E6:66:11:F3:8D:F3:62:55:95:7B:FF:57:86:
    50:CF:70:6A:3B:5E:7D:14:4A:67:66:0F:AC:77:8D:64:
    22:7D:5B:88:C5:21:EE:20:D5:8B:1D:61:B9:18:7D:00:
    4A:E0:A0:67:9B:EE:78:42:4C:4A:AD:09:E1:CA:54:4F:
    46:4D:B5:55:29:20:BE:D0:3B:56:20:A9:30:D5:C9:3A:
    54:F2:B9:FB:86:4E:D9:1F:56:D5:5D:7F:86:B6:A7:BF:
    70:9F:16:D2:5F:2B:FA:A0:D9:B0:82:1C:B4:40:84:04:
    CC:C1:3E:C0:27:75:C4:D5:1A:32:15:53:06:7C:46:DF:
    B5:4A:AE:0B:AA:02:00:F7:DD:D6:7B:21:EE:A2:A3:1A:
    AD:FD:FC:34:39:A8:46:1C:76:09:B7:85:97:4D:3C:F1:
    12:69:4E:8D:99:9A:05:6A:79:E3:ED:73:47:1D:62:B3:
    7B:83:7A:82:D2:1F:B9:36:A8:E5:41:2B:5C:2B:A0:AB:
    2C:4F:AB:2E:FF:87:74:2D:D0:24:B8:6B:9E:73:87:E6:
    F2:6D:29:84:3E:5B:A3:B2:47:C2:14:5D:1C:31:33:65:
    6A:77:F5:96:19:CD:F7:C5:41:9E:0B:FB:38:93:58:34:
    2A:9F:17:9F:01:75:73:BF:B3:64:BF:B6:B6:4C:AC:FC:
    10:28:E8:A6:AB:BF:76:29:AA:E9:89:1F:20:DE:B9:B5:
    F5:9A:8F:45:8E:33:12:EE:B6:02:51:A4:6A:86:B1:1F:
    55:62:4C:2D:7F:54:42:9E:F8:EA:96:81:53:40:92:94:
    EB:64:A4:A2:F6:9E:FC:29:80:F1:EB:00:C6:8C:E1:48:
    30:9D:12:CF:04:EF:58:94:43:CE:99:C6:0A:70:70:3C:
    9B:2F:58:A0:A4:A8:A4:18:AB:FF:81:2C:C9:3F:00:93:
    C1:6A:8A:9D:1D:CE:DB:78:5B:D2:BE:52:F3:35:B2:55:
    79:39:11:2D:18:A9:83:6D:F6:32:79:45:1C:F2:98:6D:
    70:69:86:E8:1C:FA:A4:60:9F:4E:FD:10:7C:42:04:CD:
    BB:58:D5:4A:53:D1:95:86:3B:AB:0B:9D:BC:4A:18:8D:
    0B:79:76:59:4A:05:E8:B8:87:2D:D5:3C:8B:A3:01:AF: 0x010001

RSA-SHA1:

82 2c 26 eb 5a 3e 98 6c  a1 23 74 be 76 ef fb 14  |.,&.Z>.l.#t.v...|
97 ba e3 74 56 db 84 8c  8d 1c 1c f7 a7 1d ce 69  |...tV..........i|
2e 5b cd 72 f0 e4 ad 14  86 c1 80 6d 32 da 57 e5  |.[.r.......m2.W.|
55 97 9b 74 5c 90 4d ad  2f 31 d3 28 fb 98 01 68  |U..t\.M./1.(...h|
48 08 04 a9 83 c2 25 2f  30 88 2b ca 96 33 34 84  |H.....%/0.+..34.|
7a a5 34 59 26 2a 9a dd  cf db e8 5d 86 ed f7 a4  |z.4Y&*.....]....|
2e 22 55 e3 a3 fc 97 0d  1e f1 46 22 2b df ff c6  |."U.......F"+...|
12 b8 07 55 58 92 e5 79  60 78 83 42 a8 1d 1a ad  |...UX..y`x.B....|
4f a2 bb 9c b5 1b 0c 42  10 83 a3 eb b6 2b 5e 78  |O......B.....+^x|
6f b4 aa 60 01 00 8a 10  71 d6 6d c9 31 39 51 92  |o..`....q.m.19Q.|
a2 e1 3c 93 87 9f bc 26  87 5e ad c8 59 f9 91 7f  |..<....&.^..Y...|
54 50 62 48 5d b6 4b 4a  5c 6f b9 24 db 21 77 07  |TPbH].KJ\o.$.!w.|
cd da 5f 27 2c 93 70 f0  fe 5f f5 5c 0b 1a 62 22  |.._',.p.._.\..b"|
c4 f1 d8 ca a5 0c 4a d7  ad 98 97 bc f2 63 85 29  |......J......c.)|
52 bf 37 d6 52 f0 11 1e  1d 30 f0 4d 0a f1 ca e0  |R.7.R....0.M....|
c2 35 f4 be 91 be 21 c4  7e e4 dc 23 b7 71 2d 29  |.5....!.~..#.q-)|
79 ce 9a b8 32 22 3c fd  95 af 51 c9 71 2b e3 e4  |y...2"<...Q.q+..|
fe ae fc b8 ef 13 70 90  22 8d 93 93 06 19 21 24  |......p.".....!$|
5f 39 07 35 d5 35 0a 92  58 56 1a bc 2c ed d0 c9  |_9.5.5..XV..,...|
c7 c0 12 04 6e c2 48 1e  01 a2 7f 88 bf b0 5c 7f  |....n.H.......\.|
c0 49 cf 1d ff e6 23 0e  ae 65 01 3c aa 11 44 80  |.I....#..e.<..D.|
be b0 2c 69 8d d3 8f e6  35 6c 4b 42 70 8b cb 52  |..,i....5lKBp..R|
9e dc ee 46 ae 16 ca 7d  32 1c 0a 21 33 b5 06 08  |...F...}2..!3...|
4a 4c d7 f8 f8 6c a8 ff  02 02 19 cc dc bf 2d 0b  |JL...l........-.|
ac 5a a4 2d ff 84 2d db  0a 7c f0 c8 0e db 74 ca  |.Z.-..-..|....t.|
d6 64 ba 88 36 86 4b 1e  9e eb 7a db f9 7e 60 54  |.d..6.K...z..~`T|
87 ad 19 4c a3 73 e3 fe  99 1c db de b1 d5 5f 3e  |...L.s........_>|
e7 d2 af db 22 1a 37 d5  04 4e 38 bf f1 f7 f9 55  |....".7..N8....U|
8a c7 5d e0 71 64 18 48  76 3f ae 62 c4 2b e5 08  |..].qd.Hv?.b.+..|
d4 44 cf a2 2b e2 bd d8  b2 3c 5f 3a 6a e7 f4 9a  |.D..+....<_:j...|
ea 35 e9 74 87 36 d9 5a  72 9f 82 d0 45 5d 5e b0  |.5.t.6.Zr...E]^.|
3c 31 48 2d 4a 4c 39 82  5a 55 02 3e 4f 4d 32 6f  |<1H-JL9.ZU.>OM2o|

unnamed
- #0
  - C: AU
  - ST: Some-State
  - O: Internet Widgits Pty Ltd
- 1
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

ee b1 b0 75 fa b0 92 4b  0b 17 82 e3 c6 34 34 a2  |...u...K.....44.|
99 45 88 db                                       |.E..            |

rsaEncryption:

67 66 57 73 9b b5 97 71  8f 7d 7a 6d 75 be 7d 7b  |gfWs...q.}zmu.}{|
65 af cd 92 b1 20 d7 fa  0a f9 ac 32 30 c9 c1 59  |e.... .....20..Y|
a2 18 64 ea ff 0e eb b0  25 68 41 db 29 63 ac d4  |..d.....%hA.)c..|
3f 75 92 65 05 61 20 98  43 fa cd 00 f3 e7 45 89  |?u.e.a .C.....E.|
50 cb ff dc c2 62 7b a8  97 c0 2f fb 7c 4c 1d f5  |P....b{.../.|L..|
d7 7a 33 90 0f 02 df fb  84 e0 b6 3f 2a 2d 63 0e  |.z3........?*-c.|
34 04 0f 8c 3c 77 b6 f3  76 7c e1 8b eb ca 99 68  |4...p..|
d6 18 37 f6 51 9a 2d 78  fe c3 fa cc 26 e1 50 9b  |..7.Q.-x....&.P.|
61 86 38 92 fd e5 f8 66  f0 16 3a 9a 8c 96 6e fb  |a.8....f..:...n.|
64 89 0c ae 29 6b ac e1  f0 9c cc 7a c9 f5 e0 da  |d...)k.....z....|
2c da 1e 94 fd ac 8e 11  00 3f fa 83 77 91 e2 16  |,........?..w...|
bf a8 29 61 88 15 c7 1e  1b 03 1d d1 cb 28 ea f7  |..)a.........(..|
77 78 b4 3a b7 3c e3 84  2d 5a 41 e2 ab c4 b3 9d  |wx.:.<..-ZA.....|
37 ab 41 b9 a0 83 80 e8  34 64 71 46 49 61 b3 05  |7.A.....4dqFIa..|
82 c9 5f f7 3f 44 44 2b  e0 d2 12 1d ac 6b d0 61  |.._.?DD+.....k.a|
74 52 fb 65 3e 1d 65 ca  79 d3 3a 30 b9 be e4 a6  |tR.e>.e.y.:0....|
da 2b b7 87 36 4a b6 79  f9 0d 70 35 20 0f 9e 51  |.+..6J.y..p5 ..Q|
72 e6 c5 36 6a e5 23 fd  c0 27 26 bd 3b 10 b1 aa  |r..6j.#..'&.;...|
1b 71 19 c5 aa 4e 82 01  39 b7 a6 4d 3a 10 39 0a  |.q...N..9..M:.9.|
d6 d2 ea 3b 76 36 4e e9  e5 80 87 6c 66 30 6e ff  |...;v6N....lf0n.|
8d 6b 0a 6d 79 e1 e2 5d  b0 f9 10 b5 7e 05 e8 a2  |.k.my..]....~...|
25 63 42 51 a3 de c9 e4  0a 17 ac 51 d5 d6 49 d2  |%cBQ.......Q..I.|
cc bc 55 2d c3 c8 f1 ae  6e 0e d8 be 73 b5 9b 87  |..U-....n...s...|
f2 e5 58 1d 9c 6d fa f2  a4 cc e6 b5 7c d7 70 6e  |..X..m......|.pn|
19 92 00 47 1d 47 be 7d  e8 3a 20 0d 46 33 f6 79  |...G.G.}.: .F3.y|
85 2f cf 1f b7 28 2a 1b  c2 59 07 4a 72 b4 35 2d  |./...(*..Y.Jr.5-|
a3 41 4d 64 4f 54 96 c7  64 0b b8 d8 a9 b1 d3 5a  |.AMdOT..d......Z|