hello-1.efi

info
MZ
PE
foremost
signature
hexdump
disasm
log
discuss
donate

filename	hello-1.efi
size	7705 (0x1e19)
md5	87b457537ee3e1e8d567a2d0e965261b

type	PE32+ executable (EFI application) x86-64 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	5
TimeDateStamp	0x4fe8bc20
PointerToSymbolTable	0x1600
NumberOfSymbols	0x12
SizeOfOptionalHeader	0xf0
Characteristics	0x206
Magic	0x20b
LinkerVersion	2.22
SizeOfCode	0xa00
SizeOfInitializedData	0x800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2000
BaseOfCode	0x2000
ImageBase	0
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	0.0
ImageVersion	0.0
SubsystemVersion	0.0
Reserved1	0
SizeOfImage	0x7000
SizeOfHeaders	0x400
CheckSum	0x41a4
Subsystem	0xa
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0
SizeOfHeapCommit	0
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x81d	0xa00	R-X CODE
.reloc	0x3000	0xa	0x200	R-- IDATA DISCARDABLE
.data	0x4000	0x6c	0x200	RW- IDATA
.dynamic	0x5000	0xc0	0x200	RW- IDATA
.dynsym	0x6000	0x1b0	0x200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0	0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x17d3	0x646
BASERELOC	0x3000	0xa
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/L=SomeCity/O=SomeOrg

serial: 6E7EF98E3DC106E0

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7962075580554348256 (0x6e7ef98e3dc106e0)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, L=SomeCity, O=SomeOrg
        Validity
            Not Before: Jun 28 04:07:02 2012 GMT
            Not After : Jun 28 04:07:02 2013 GMT
        Subject: C=US, L=SomeCity, O=SomeOrg, CN=pjones
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:ab:96:16:82:18:f6:8c:9d:14:22:35:97:
                    61:d2:bc:a9:5e:01:3b:dc:ec:f0:86:37:b3:f6:43:
                    54:f6:65:92:8d:ae:19:56:7b:6a:1f:e4:66:dd:7b:
                    31:00:63:37:33:13:f9:ae:8f:e6:14:b7:82:a7:4d:
                    0f:5b:18:72:c3:53:86:55:b5:5a:6f:ef:25:2b:66:
                    90:a7:0b:39:26:cf:10:30:c9:8b:7b:7a:29:3d:8f:
                    ce:da:02:d7:92:c9:32:25:2f:79:6b:55:59:eb:4a:
                    d7:09:b8:fa:36:86:90:fd:09:41:8f:7b:2f:92:55:
                    73:93:f1:7b:15:be:2a:40:22:e8:a0:60:7b:01:d0:
                    dc:b7:45:e5:3d:e0:28:3a:8b:bf:57:31:1d:8c:3e:
                    2c:4c:11:ae:98:5a:43:10:9b:50:08:c7:ed:96:5e:
                    e6:23:cc:89:2b:a2:89:90:d7:bd:20:8d:1a:28:98:
                    04:31:f8:3f:59:ad:1c:a8:11:d3:f2:4c:73:0f:4e:
                    cc:dc:17:7f:d4:e5:59:97:a1:4e:c4:5e:68:6c:a5:
                    8b:79:cc:65:45:6f:dc:d2:ee:45:ed:e0:e6:2f:d4:
                    51:59:39:8d:5d:2c:2a:c0:c5:2c:61:64:b0:9e:af:
                    a5:09:b7:b3:47:f1:b7:4a:41:e0:a6:c7:ed:66:f3:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BB:93:80:65:AA:D9:0F:FE:CB:12:3A:53:B8:D3:AE:B8:FB:AC:89:E0
            X509v3 Authority Key Identifier: 
                keyid:0F:25:4F:0A:68:7E:CF:F1:DA:B4:3C:00:F0:96:9F:A4:4B:92:C8:C5

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Trust List Signing
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                Testing Certificate for pjones
    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:01:25:b1:00:4e:66:fb:9a:f0:29:5a:37:1f:d6:a9:de:
         bb:c1:76:93:9e:36:c9:27:2b:ee:b3:42:24:c7:f5:83:d2:86:
         76:64:a3:a3:36:90:7f:e2:2d:99:65:08:0e:d3:62:fe:58:d1:
         6f:35:e7:11:72:aa:54:a1:f6:a3:eb:ad:64:d5:64:84:48:ed:
         da:72:0f:3b:6a:0d:27:b2:4d:f1:23:c6:c9:e8:29:54:77:8f:
         1a:5d:5a:dc:37:43:b0:80:54:86:09:ff:87:98:dc:0b:ee:35:
         a0:75:86:94:ef:c6:9b:e0:86:f6:eb:21:08:00:f5:29:40:ab:
         f5:50:d8:fe:67:0e:a2:1f:56:77:e6:ef:47:f1:44:ed:ab:32:
         99:a4:e7:cf:c9:aa:df:76:15:2b:25:aa:63:5b:27:5e:ff:b1:
         af:40:1f:09:dd:7c:ed:3e:2f:f6:2b:29:2c:2e:35:8b:96:44:
         64:61:60:a4:c1:b1:9f:22:a5:dd:9d:24:7a:7a:a7:a2:62:ed:
         f4:83:32:3a:1c:48:09:b2:a4:c2:46:87:97:00:5d:0c:63:22:
         e5:08:6c:42:55:a0:12:cb:87:f3:e8:27:e1:5c:b6:5e:85:91:
         63:4e:4b:dd:7c:eb:91:2f:ff:e8:41:b8:2e:71:47:0a:10:c7:
         57:bf:38:a4

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

msCodeInd

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA256

53 a1 e0 84 8e b3 6c d9 ac d3 b6 13 cf ab 6a c3 |S.....l.......j.| 87 f4 e8 c3 ff d6 94 c3 45 72 0c 9f 48 15 d2 e0 |........Er..H...|

Certificate #2

2
- 6E:7E:F9:8E:3D:C1:06:E0
- RSA-SHA256: nil
- Issuer
  - C: US
  - L: SomeCity
  - O: SomeOrg
- 2012-06-28 04:07:02 UTC: 2013-06-28 04:07:02 UTC
- Subject
  - C: US
  - L: SomeCity
  - O: SomeOrg
  - CN: pjones
- #5
  - rsaEncryption: nil
  - B0:B2:AB:96:16:82:18:F6:8C:9D:14:22:35:97:61:D2:
    BC:A9:5E:01:3B:DC:EC:F0:86:37:B3:F6:43:54:F6:65:
    92:8D:AE:19:56:7B:6A:1F:E4:66:DD:7B:31:00:63:37:
    33:13:F9:AE:8F:E6:14:B7:82:A7:4D:0F:5B:18:72:C3:
    53:86:55:B5:5A:6F:EF:25:2B:66:90:A7:0B:39:26:CF:
    10:30:C9:8B:7B:7A:29:3D:8F:CE:DA:02:D7:92:C9:32:
    25:2F:79:6B:55:59:EB:4A:D7:09:B8:FA:36:86:90:FD:
    09:41:8F:7B:2F:92:55:73:93:F1:7B:15:BE:2A:40:22:
    E8:A0:60:7B:01:D0:DC:B7:45:E5:3D:E0:28:3A:8B:BF:
    57:31:1D:8C:3E:2C:4C:11:AE:98:5A:43:10:9B:50:08:
    C7:ED:96:5E:E6:23:CC:89:2B:A2:89:90:D7:BD:20:8D:
    1A:28:98:04:31:F8:3F:59:AD:1C:A8:11:D3:F2:4C:73:
    0F:4E:CC:DC:17:7F:D4:E5:59:97:A1:4E:C4:5E:68:6C:
    A5:8B:79:CC:65:45:6F:DC:D2:EE:45:ED:E0:E6:2F:D4:
    51:59:39:8D:5D:2C:2A:C0:C5:2C:61:64:B0:9E:AF:A5:
    09:B7:B3:47:F1:B7:4A:41:E0:A6:C7:ED:66:F3:95:45: 0x010001
- #6
  - subjectKeyIdentifier:
```
bb 93 80 65 aa d9 0f fe  cb 12 3a 53 b8 d3 ae b8  |...e......:S....|
fb ac 89 e0                                       |....            |
```
  - authorityKeyIdentifier:
```
0f 25 4f 0a 68 7e cf f1  da b4 3c 00 f0 96 9f a4  |.%O.h~....<.....|
4b 92 c8 c5                                       |K...            |
```
  - keyUsage: true,
```
ff 80                                             |..              |
```
  - extendedKeyUsage
    - codeSigning: msCTLSign
  - basicConstraints
    - nil
  - nsComment: Testing Certificate for pjones

RSA-SHA256:

7d 3e 01 25 b1 00 4e 66  fb 9a f0 29 5a 37 1f d6  |}>.%..Nf...)Z7..|
a9 de bb c1 76 93 9e 36  c9 27 2b ee b3 42 24 c7  |....v..6.'+..B$.|
f5 83 d2 86 76 64 a3 a3  36 90 7f e2 2d 99 65 08  |....vd..6...-.e.|
0e d3 62 fe 58 d1 6f 35  e7 11 72 aa 54 a1 f6 a3  |..b.X.o5..r.T...|
eb ad 64 d5 64 84 48 ed  da 72 0f 3b 6a 0d 27 b2  |..d.d.H..r.;j.'.|
4d f1 23 c6 c9 e8 29 54  77 8f 1a 5d 5a dc 37 43  |M.#...)Tw..]Z.7C|
b0 80 54 86 09 ff 87 98  dc 0b ee 35 a0 75 86 94  |..T........5.u..|
ef c6 9b e0 86 f6 eb 21  08 00 f5 29 40 ab f5 50  |.......!...)@..P|
d8 fe 67 0e a2 1f 56 77  e6 ef 47 f1 44 ed ab 32  |..g...Vw..G.D..2|
99 a4 e7 cf c9 aa df 76  15 2b 25 aa 63 5b 27 5e  |.......v.+%.c['^|
ff b1 af 40 1f 09 dd 7c  ed 3e 2f f6 2b 29 2c 2e  |...@...|.>/.+),.|
35 8b 96 44 64 61 60 a4  c1 b1 9f 22 a5 dd 9d 24  |5..Dda`...."...$|
7a 7a a7 a2 62 ed f4 83  32 3a 1c 48 09 b2 a4 c2  |zz..b...2:.H....|
46 87 97 00 5d 0c 63 22  e5 08 6c 42 55 a0 12 cb  |F...].c"..lBU...|
87 f3 e8 27 e1 5c b6 5e  85 91 63 4e 4b dd 7c eb  |...'.\.^..cNK.|.|
91 2f ff e8 41 b8 2e 71  47 0a 10 c7 57 bf 38 a4  |./..A..qG...W.8.|

unnamed
- #0
  - C: US
  - L: SomeCity
  - O: SomeOrg
- 6E:7E:F9:8E:3D:C1:06:E0
SHA256: nil

SMIME-CAPS
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
signingTime: 2012-06-28 12:59:23 UTC

messageDigest:

b0 eb 89 6c 98 bc 4a 45  76 a9 2b b9 fc 8a 96 9b  |...l..JEv.+.....|
d6 c7 d9 ca 25 53 1b 95  d3 76 2b b6 d6 fe e1 3c  |....%S...v+....<|

RSA-SHA256:

02 9b 89 cb 24 f0 18 4c  62 f5 08 68 98 28 00 23  |....$..Lb..h.(.#|
d7 58 1a 2f 1c 02 80 3e  50 61 41 df 20 b9 70 e8  |.X./...>PaA. .p.|
3f 26 82 4e a5 84 1d d7  e3 df 39 da a2 34 51 18  |?&.N......9..4Q.|
57 0c 2c a8 2d c3 4c 87  5b 87 6b 28 2d 73 67 ab  |W.,.-.L.[.k(-sg.|
b0 46 66 7b b2 9f 7d 77  e8 94 5d 92 80 77 bd 36  |.Ff{..}w..]..w.6|
20 e1 1f eb 31 b6 6c 86  e7 3d e2 b7 01 de 73 fc  | ...1.l..=....s.|
b4 ae 34 f6 1d 04 76 2b  8e 1f 19 1c 31 49 fa 52  |..4...v+....1I.R|
09 88 08 65 1b 58 16 2a  3d a5 2e ce 24 63 e8 f2  |...e.X.*=...$c..|
f1 ee 1e b6 d1 8e b0 bf  46 bf 47 55 f9 3b d0 5f  |........F.GU.;._|
e8 ef fd 54 a1 98 8b db  32 fd 15 26 a6 66 46 7c  |...T....2..&.fF||
d6 a3 01 9d 50 16 a8 2a  6b 4c e1 72 63 cb 8c d9  |....P..*kL.rc...|
e3 8a 31 95 08 f6 2b 62  9f 5d ea 7e 1b db 78 92  |..1...+b.].~..x.|
bb 5e 48 6b f5 d9 0e 77  06 11 4d 6c 86 d4 f5 52  |.^Hk...w..Ml...R|
52 e5 14 b2 2d 74 61 70  d5 e6 94 1f c0 66 23 03  |R...-tap.....f#.|
e7 8e 97 ba 12 a0 9c 9b  5a 1d fa 79 f5 f4 7b 51  |........Z..y..{Q|
18 c0 65 e8 7f b8 56 17  bb 49 e6 7c 94 ae c3 e0  |..e...V..I.|....|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	2121	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK