MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040704B0

VS_FIXEDFILEINFO

Signers (1)

issuer: /CN=Root Agency
serial: 430D1CC9E3DED9A647645CA7ABA89C7E

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0d:1c:c9:e3:de:d9:a6:47:64:5c:a7:ab:a8:9c:7e
    Signature Algorithm: md5WithRSAEncryption
        Issuer: CN=Root Agency
        Validity
            Not Before: Dec 22 07:41:17 2011 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=FlowFact AG
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:af:4c:ed:a7:f2:43:d2:fc:19:29:10:f8:93:00:
                    a7:e5:70:21:24:37:22:ac:e8:78:9c:54:eb:ba:e2:
                    9a:cb:26:f4:b9:dc:81:7f:52:6c:80:20:9b:56:7a:
                    fb:5d:6e:1f:6f:d8:60:3b:5b:3c:ef:21:ee:a2:53:
                    a3:98:e4:5b:74:51:c1:98:26:47:04:bc:0b:0d:ab:
                    12:12:ff:8a:f1:92:c6:a7:e8:15:a4:0c:30:22:22:
                    51:cc:c2:b7:80:b2:43:be:d8:27:f5:c6:57:bd:0a:
                    fa:43:c6:68:c1:83:c6:41:3f:1e:80:2b:80:b9:b6:
                    f4:ba:55:e4:38:a3:45:38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
    Signature Algorithm: md5WithRSAEncryption
         5e:67:86:92:67:fe:91:d4:55:0c:ee:bc:b9:f1:92:00:f9:8b:
         7f:16:50:ba:5a:0e:e0:4c:b0:b4:0d:24:e5:b4:9a:b9:89:a5:
         6b:4a:ca:2f:0b:93:c7:51:54:41:ce:48:65:10:4b:b1:f8:05:
         04:c0:71:eb:15:a3:fd:8f:e7:4d
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 11 e8 51 7c 6d cf a8 1d  15 98 1f a7 1e ca e9 79  |..Q|m..........y|
            96 b0 07 fb                                       |....            |
    • #2
      • 2
        • 43:0D:1C:C9:E3:DE:D9:A6:47:64:5C:A7:AB:A8:9C:7E
        • RSA-MD5: nil
        • CN: Root Agency
        • 2011-12-22 07:41:17 UTC: 2039-12-31 23:59:59 UTC
        • CN: FlowFact AG
        • #5
          • rsaEncryption: nil
          • AF:4C:ED:A7:F2:43:D2:FC:19:29:10:F8:93:00:A7:E5:
            70:21:24:37:22:AC:E8:78:9C:54:EB:BA:E2:9A:CB:26:
            F4:B9:DC:81:7F:52:6C:80:20:9B:56:7A:FB:5D:6E:1F:
            6F:D8:60:3B:5B:3C:EF:21:EE:A2:53:A3:98:E4:5B:74:
            51:C1:98:26:47:04:BC:0B:0D:AB:12:12:FF:8A:F1:92:
            C6:A7:E8:15:A4:0C:30:22:22:51:CC:C2:B7:80:B2:43:
            BE:D8:27:F5:C6:57:BD:0A:FA:43:C6:68:C1:83:C6:41:
            3F:1E:80:2B:80:B9:B6:F4:BA:55:E4:38:A3:45:38:5B
            : 0x010001
        • 2.5.29.1
          • 12 e4 09 2d 06 1d 1d 4f  00 8d 61 21 dc 16 64 63  |...-...O..a!..dc|
            • CN: Root Agency
            • 06 37 6c 00 aa 00 64 8a  11 cf b8 d4 aa 5c 35 f4  |.7l...d......\5.|
      • RSA-MD5:
        5e 67 86 92 67 fe 91 d4  55 0c ee bc b9 f1 92 00  |^g..g...U.......|
        f9 8b 7f 16 50 ba 5a 0e  e0 4c b0 b4 0d 24 e5 b4  |....P.Z..L...$..|
        9a b9 89 a5 6b 4a ca 2f  0b 93 c7 51 54 41 ce 48  |....kJ./...QTA.H|
        65 10 4b b1 f8 05 04 c0  71 eb 15 a3 fd 8f e7 4d  |e.K.....q......M|
    • 1
      • #0
        • CN: Root Agency
        • 43:0D:1C:C9:E3:DE:D9:A6:47:64:5C:A7:AB:A8:9C:7E
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest:
          a9 77 44 b0 3c 05 0b 46  7f 56 ff 28 26 d0 b3 1d  |.wD.<..F.V.(&...|
          3c c4 c0 d4                                       |<...            |
      • rsaEncryption:
        2c 23 b8 03 85 71 47 18  d3 15 a5 97 e9 85 58 0f  |,#...qG.......X.|
        0c f9 e2 b6 34 25 27 01  78 54 c7 cd 54 71 8a 2c  |....4%'.xT..Tq.,|
        a6 f4 2a 36 b8 59 8e 11  00 ff 5d 6f b3 f2 d2 89  |..*6.Y....]o....|
        50 45 bc ee 06 4d 01 de  87 c8 07 fe 04 f5 01 08  |PE...M..........|
        73 bc 94 5b c1 00 34 95  9e ee e6 91 4c f9 c9 2e  |s..[..4.....L...|
        70 c4 02 2b 0a c9 da 67  72 5c 12 d6 87 93 cd 00  |p..+...gr\......|
        49 12 57 29 c8 4c 1c a6  ce d4 25 31 ad a5 7c fd  |I.W).L....%1..|.|
        db 89 a4 47 47 ac 2a 60  16 c7 96 76 b2 40 32 0a  |...GG.*`...v.@2.|
offsetsizetypecomment
18baa3246BMP(16 x 16)#
18bba5246BMP(16 x 16)#
18bca7246BMP(16 x 16)#
1b25cb326BMP(30 x 13)#
1e13b1824BMP(16 x 16)#
1e251d824BMP(16 x 16)#
1e2861824BMP(16 x 16)#
1e2ba5824BMP(16 x 16)#
1e2ee9824BMP(16 x 16)#
1e322d824BMP(16 x 16)#
1e3571824BMP(16 x 16)#
1e38b5824BMP(16 x 16)#
1e3bf9824BMP(16 x 16)#
1e3f3d824BMP(16 x 16)#
1e4281824BMP(16 x 16)#
1e45c5824BMP(16 x 16)#
1e4909824BMP(16 x 16)#
1e4c4d824BMP(16 x 16)#
1e4f91824BMP(16 x 16)#
1e52d5824BMP(16 x 16)#
1e5619824BMP(16 x 16)#
1e595d824BMP(16 x 16)#
1e5ca1824BMP(16 x 16)#
1e5fe5824BMP(16 x 16)#
1e6329824BMP(16 x 16)#
1e666d824BMP(16 x 16)#
1e69b1824BMP(16 x 16)#
1e6cf5824BMP(16 x 16)#
1e7039824BMP(16 x 16)#
1e737d824BMP(16 x 16)#
1e76c1824BMP(16 x 16)#
1e7a05824BMP(16 x 16)#
1e7d49824BMP(16 x 16)#
1e808d824BMP(16 x 16)#
1e83d1824BMP(16 x 16)#
1e8715824BMP(16 x 16)#
1e8a59824BMP(16 x 16)#
1e8ea5326BMP(16 x 16)#
21b42f25486BMP(213 x 113)#
22a98e65886BMP(104 x 211)#
269b26118258BMP(420 x 279)#
2ac34e574BMP(13 x 13)#
2ac598574BMP(13 x 13)#
2ac7e2730BMP(13 x 13)#
2acac8574BMP(13 x 13)#
2add4e1042GIF(18 x 15)#
2ae16c1040GIF(18 x 15)#
2ae588636GIF(18 x 15)#
2b71bb822BMP(16 x 16)#
2c1301822BMP(16 x 16)#
2c827d246BMP(16 x 16)#
2dd801329GIF(16 x 16)#
2dd956342GIF(16 x 16)#
2ddab8397GIF(16 x 16)#
2ddc51609GIF(16 x 16)#
2ddebe408GIF(16 x 16)#
2fa5a9822BMP(16 x 16)#
2fa8eb822BMP(16 x 16)#
2fac218390583BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x238