SuddenAttack.exe - Lithtech.EXE

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	SuddenAttack.exe
size	25036888 (0x17e0858)
md5	48382238b17aae51b007465f119a3dee

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x148

Rich Header

lib id	version	times used
4	8047	2
4	8168	2
10	8168	20
147	30729	2
12	7291	5
14	7299	47
10	9782	179
11	8047	2
19	8034	19
96	4035	1
1	0	326
25	9210	4
0	0	17
18	8444	1
28	9178	3
29	9178	76
11	9782	342
6	1735	1
4	8447	3

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x4fc1bef7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x24c000
SizeOfInitializedData	0x11a2000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x18e3000
BaseOfCode	0x1000
BaseOfData	0x24d000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x18e5000
SizeOfHeaders	0x1000
CheckSum	0x17ef545
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
	0x1000	0x1700000	0x1700000	RWX IDATA
.rsrc	0x1701000	0x3f9b	0x4000	RW- IDATA
.idata	0x1705000	0x1000	0x1000	RW- IDATA
	0x1706000	0x107000	0x1000	RWX IDATA
dewfijuo	0x180d000	0xd6000	0xd6000	RWX IDATA
dabypaxa	0x18e3000	0x1000	0x1000	RWX IDATA
amtxemgi	0x18e4000	0x1000	0x1000	RWX IDATA

Data Directory

type	va	size
EXPORT	0x18e2e80	0x6e
IMPORT	0x170506d	0x95
RESOURCE	0x1701000	0x3f9b
EXCEPTION	0	0
SECURITY	0x17df000	0x1858
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0x78cc193e	0x77ecdfd5

show previews

type	name	size
CURSOR	#2	308
CURSOR	#3	180
BITMAP	#26567	1508
BITMAP	#30994	184
BITMAP	#30995	364
BITMAP	#30996	324
ICON	#1	3240
DIALOG	#137	976
DIALOG	#145	32
DIALOG	#152	542
DIALOG	#30721	232
STRING	#3841	130
STRING	#3842	42
STRING	#3843	330
STRING	#3857	1250
STRING	#3858	674
STRING	#3859	732
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1220
STRING	#3868	612
STRING	#3869	44
GROUP_CURSOR	#30977	34
GROUP_ICON	#128	20
VERSION	#1	844
MANIFEST	MANIFEST_RESOURCE_ID	527

id	lang	string
61440	1033	
61456	1033	
61472	1033	
61696	1033	
61712	1033	
61728	1033	
61824	1033	
61840	1033	
61856	1033	
61872	1033	
61888	1033	

module_name	hint	ord	function_name
kernel32.dll			lstrcpy
comctl32.dll			InitCommonControls

ord	entry_va	function_name
1	0x73b10	LTGetILTMemory
2	0x777b7	SetMasterDatabase

module_name	SuddenAttack.exe
flags	0
timestamp	2012-05-27 05:43:19
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x18e2eb0
Functions(2)	0x18e2ea8
NameOrdinals(2)	0x18e2eb8

StringTable 040904b0

Comments
CompanyName	GameHI
FileDescription	Sudden Attack
FileVersion	1, 0, 0, 1
InternalName	Sudden Attack
LegalCopyright	Copyright (C) 2005
LegalTrademarks
OriginalFilename	Lithtech.EXE
PrivateBuild
ProductName	Sudden Attack
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2

serial: 78D13BC5B85217EAE9619C8FC0FA0562

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: May  1 00:00:00 2012 GMT
            Not After : Dec 31 23:59:59 2012 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a9:59:66:74:da:3d:8a:7d:7a:d8:fc:f5:80:44:
                    7b:fe:47:6a:14:55:4e:50:47:0b:ec:d3:ed:ce:f6:
                    38:f7:4f:69:b9:b1:f0:b6:78:82:0a:8c:76:16:67:
                    e2:02:ad:b7:0d:a5:8a:f6:03:fc:66:d3:fc:08:2d:
                    cc:b5:73:59:7b:89:dc:33:6e:66:5a:5e:52:37:b4:
                    62:d1:92:59:35:14:8b:45:ac:59:b2:4d:24:a2:98:
                    94:68:42:72:9f:3a:68:e2:6b:8b:9e:22:2d:f4:98:
                    4e:9a:c6:af:b3:e4:a0:ab:3c:28:bf:23:e1:d7:72:
                    a4:f2:10:53:67:ae:77:af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-3
            X509v3 Subject Key Identifier: 
                B4:B7:F1:89:49:26:60:E7:65:EA:73:AE:DC:D3:38:CD:BF:57:92:6F
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1e:98:aa:27:b7:78:b5:08:b5:c9:72:6d:b7:df:c0:0e:98:a6:
        35:c4:88:c9:d2:f6:6d:f1:4b:1a:fb:d5:f9:2d:99:00:9e:d1:
        e7:9b:8b:e1:3f:bd:39:80:0c:66:cd:07:bc:5c:98:54:a6:94:
        ba:10:d1:4e:8b:ab:f5:6f:65:cc:67:09:a2:80:7c:52:e8:0e:
        03:d6:6b:7a:c6:05:18:ec:c8:ac:42:7c:07:2c:a7:3d:08:66:
        dc:00:ed:fd:94:1d:73:f2:72:98:93:b1:11:d6:8f:ef:8e:ea:
        ac:f4:96:51:0c:d0:8d:df:31:52:4f:5e:af:7d:a7:4a:75:e6:
        4e:ce:2b:9f:29:2b:e7:cf:5d:9f:03:7e:6e:27:7b:23:ad:62:
        29:66:af:92:e8:2c:ce:bd:9c:7f:dc:cd:17:3c:43:c2:09:3f:
        75:45:c7:9e:e4:d7:60:7f:97:c6:e4:aa:c7:69:f5:fc:cd:74:
        ac:2c:b0:48:c1:50:4e:70:56:1e:b5:35:d3:8e:be:b1:ed:ac:
        bd:fe:0c:ec:85:7d:d5:bb:85:66:44:19:5d:9f:93:eb:82:ba:
        63:9e:d3:7c:61:ff:c8:1b:d9:23:58:7f:30:a3:66:a1:39:26:
        5e:92:c3:3c:cb:37:32:fa:f5:a3:8d:dc:d5:b0:a3:e9:25:36:
        55:d7:81:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d1:3b:c5:b8:52:17:ea:e9:61:9c:8f:c0:fa:05:62
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: May 19 00:00:00 2011 GMT
            Not After : Jul 17 23:59:59 2013 GMT
        Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=Gamehi Inc, CN=Gamehi Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:ad:9a:3f:2d:db:5a:d3:53:3b:60:c6:f6:
                    52:c6:3b:e5:ad:a4:47:8f:22:ee:6a:c0:65:b7:9a:
                    b7:25:dd:6c:08:cb:69:b5:a2:4a:1f:2d:4d:0b:13:
                    db:a8:b1:db:77:7a:51:4d:5a:be:d0:ff:61:c7:db:
                    a1:21:e5:0f:c2:f5:92:8c:4d:9a:e8:79:6f:b6:1d:
                    62:ff:fc:54:9c:62:ee:27:ac:b9:cc:6c:2e:d8:9f:
                    de:2c:95:45:39:17:9e:ef:4b:fd:df:51:72:51:5e:
                    b6:51:48:a0:87:03:2f:13:bc:2d:5b:95:57:f5:e9:
                    e1:28:79:6d:a6:7c:7c:23:b8:6b:26:b2:61:d2:40:
                    aa:57:51:f7:b1:a8:66:72:d4:3a:15:3a:c7:15:bd:
                    ff:88:e8:bd:fc:57:c9:29:3b:46:3d:43:8f:ed:0b:
                    22:b4:a3:59:b1:02:52:d8:9a:25:ce:1e:bf:4b:89:
                    05:33:d3:2d:cf:d8:12:e0:7e:09:04:f4:a7:13:4c:
                    29:42:62:dc:3e:51:5f:65:5b:6c:64:5d:9c:90:8e:
                    37:34:f9:b0:b3:77:87:63:90:20:ce:89:49:c9:6e:
                    d4:6a:d3:25:25:6d:5a:80:f8:8c:d1:b2:04:e1:94:
                    de:fa:d8:46:2d:d8:71:ed:b5:62:fb:13:8f:be:2d:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        18:e2:7f:4b:ae:d6:9a:18:51:40:86:c7:39:fc:be:1d:93:22:
        3d:2a:b3:1e:20:b6:04:9e:27:5d:a8:34:25:ee:b8:e2:4d:3f:
        65:e6:eb:fc:63:b1:04:9d:47:1a:17:60:59:9c:8b:ac:4b:71:
        6d:d3:12:26:55:b9:59:5a:d4:2d:ab:6b:c9:b9:38:87:17:44:
        09:0c:ca:e4:62:04:a9:19:84:8c:ce:9d:03:78:cf:ad:7e:97:
        65:41:5c:a2:a4:1b:8c:15:02:32:da:63:3c:2f:da:14:27:b5:
        7f:0a:47:93:13:66:a2:8f:06:71:da:b0:4a:8f:d1:c2:4e:42:
        4d:fe:bd:a6:b6:91:c4:c5:76:f8:85:2b:51:e6:45:38:a8:b4:
        02:71:84:de:6f:37:b9:92:04:51:e3:f3:ae:01:56:8c:60:52:
        47:f8:30:2e:89:96:ed:63:4b:51:22:b1:60:ba:60:29:8b:bf:
        c1:3f:3d:fc:fc:b1:ea:f3:4b:0e:42:58:c2:ff:7f:39:90:6b:
        b2:39:78:53:e2:bb:b2:8f:39:24:a2:5d:7f:2c:85:f7:07:c9:
        10:50:c7:91:f3:da:11:ef:98:87:ef:a9:24:61:46:34:42:62:
        7e:da:c8:2c:90:9d:cd:f8:e7:8b:2e:b5:c7:ec:c1:cc:37:86:
        6f:93:84:12

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Nov 17 00:00:00 2006 GMT
            Not After : Jul 16 23:59:59 2036 GMT
        Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
                    73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
                    59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
                    e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
                    24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
                    11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
                    38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
                    fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
                    89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
                    60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
                    2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
                    dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
                    d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
                    92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
                    91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
                    44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
                    40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        79:11:c0:4b:b3:91:b6:fc:f0:e9:67:d4:0d:6e:45:be:55:e8:
        93:d2:ce:03:3f:ed:da:25:b0:1d:57:cb:1e:3a:76:a0:4c:ec:
        50:76:e8:64:72:0c:a4:a9:f1:b8:8b:d6:d6:87:84:bb:32:e5:
        41:11:c0:77:d9:b3:60:9d:eb:1b:d5:d1:6e:44:44:a9:a6:01:
        ec:55:62:1d:77:b8:5c:8e:48:49:7c:9c:3b:57:11:ac:ad:73:
        37:8e:2f:78:5c:90:68:47:d9:60:60:e6:fc:07:3d:22:20:17:
        c4:f7:16:e9:c4:d8:72:f9:c8:73:7c:df:16:2f:15:a9:3e:fd:
        6a:27:b6:a1:eb:5a:ba:98:1f:d5:e3:4d:64:0a:9d:13:c8:61:
        ba:f5:39:1c:87:ba:b8:bd:7b:22:7f:f6:fe:ac:40:79:e5:ac:
        10:6f:3d:8f:1b:79:76:8b:c4:37:b3:21:18:84:e5:36:00:eb:
        63:20:99:b9:e9:fe:33:04:bb:41:c8:c1:02:f9:44:63:20:9e:
        81:ce:42:d3:d6:3f:2c:76:d3:63:9c:59:dd:8f:a6:e1:0e:a0:
        2e:41:f7:2e:95:47:cf:bc:fd:33:f3:f6:0b:61:7e:7e:91:2b:
        81:47:c2:27:30:ee:a7:10:5d:37:8f:5c:39:2b:e4:04:f0:7b:
        8d:56:8c:68

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
        40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
        58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
        1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
        4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
        83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
        6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
        79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
        1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
        68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
        ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
        ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
        28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
        1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
        b6:6b:3c:25

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - dd 6e 39 29 23 d9 ae c5 94 05 fa b1 a9 58 b2 c3 |.n9)#........X..| 5b 8d 01 c3 |[... |
- Certificates
  - Certificate #0
    - 2
      - 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2012-05-01 00:00:00 UTC: 2012-12-31 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G3
      - #5
        rsaEncryption: nil
        A9:59:66:74:DA:3D:8A:7D:7A:D8:FC:F5:80:44:7B:FE:
        47:6A:14:55:4E:50:47:0B:EC:D3:ED:CE:F6:38:F7:4F:
        69:B9:B1:F0:B6:78:82:0A:8C:76:16:67:E2:02:AD:B7:
        0D:A5:8A:F6:03:FC:66:D3:FC:08:2D:CC:B5:73:59:7B:
        89:DC:33:6E:66:5A:5E:52:37:B4:62:D1:92:59:35:14:
        8B:45:AC:59:B2:4D:24:A2:98:94:68:42:72:9F:3A:68:
        E2:6B:8B:9E:22:2D:F4:98:4E:9A:C6:AF:B3:E4:A0:AB:
        3C:28:BF:23:E1:D7:72:A4:F2:10:53:67:AE:77:AF:51: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        keyUsage: true, 0x80
        subjectAltName
        CN: TSA1-3
        subjectKeyIdentifier:
        b4 b7 f1 89 49 26 60 e7 65 ea 73 ae dc d3 38 cd |....I&`.e.s...8.| bf 57 92 6f |.W.o |
    - RSA-SHA1:
```
1e 98 aa 27 b7 78 b5 08  b5 c9 72 6d b7 df c0 0e  |...'.x....rm....|
98 a6 35 c4 88 c9 d2 f6  6d f1 4b 1a fb d5 f9 2d  |..5.....m.K....-|
99 00 9e d1 e7 9b 8b e1  3f bd 39 80 0c 66 cd 07  |........?.9..f..|
bc 5c 98 54 a6 94 ba 10  d1 4e 8b ab f5 6f 65 cc  |.\.T.....N...oe.|
67 09 a2 80 7c 52 e8 0e  03 d6 6b 7a c6 05 18 ec  |g...|R....kz....|
c8 ac 42 7c 07 2c a7 3d  08 66 dc 00 ed fd 94 1d  |..B|.,.=.f......|
73 f2 72 98 93 b1 11 d6  8f ef 8e ea ac f4 96 51  |s.r............Q|
0c d0 8d df 31 52 4f 5e  af 7d a7 4a 75 e6 4e ce  |....1RO^.}.Ju.N.|
2b 9f 29 2b e7 cf 5d 9f  03 7e 6e 27 7b 23 ad 62  |+.)+..]..~n'{#.b|
29 66 af 92 e8 2c ce bd  9c 7f dc cd 17 3c 43 c2  |)f...,.......
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 78:D1:3B:C5:B8:52:17:EA:E9:61:9C:8F:C0:FA:05:62
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Thawte, Inc.
        CN: Thawte Code Signing CA - G2
      - 2011-05-19 00:00:00 UTC: 2013-07-17 23:59:59 UTC
      - Subject
        C: KR
        ST: Seoul
        L: Gangnam-gu
        O: Gamehi Inc
        CN: Gamehi Inc
      - #5
        rsaEncryption: nil
        99:8B:AD:9A:3F:2D:DB:5A:D3:53:3B:60:C6:F6:52:C6:
        3B:E5:AD:A4:47:8F:22:EE:6A:C0:65:B7:9A:B7:25:DD:
        6C:08:CB:69:B5:A2:4A:1F:2D:4D:0B:13:DB:A8:B1:DB:
        77:7A:51:4D:5A:BE:D0:FF:61:C7:DB:A1:21:E5:0F:C2:
        F5:92:8C:4D:9A:E8:79:6F:B6:1D:62:FF:FC:54:9C:62:
        EE:27:AC:B9:CC:6C:2E:D8:9F:DE:2C:95:45:39:17:9E:
        EF:4B:FD:DF:51:72:51:5E:B6:51:48:A0:87:03:2F:13:
        BC:2D:5B:95:57:F5:E9:E1:28:79:6D:A6:7C:7C:23:B8:
        6B:26:B2:61:D2:40:AA:57:51:F7:B1:A8:66:72:D4:3A:
        15:3A:C7:15:BD:FF:88:E8:BD:FC:57:C9:29:3B:46:3D:
        43:8F:ED:0B:22:B4:A3:59:B1:02:52:D8:9A:25:CE:1E:
        BF:4B:89:05:33:D3:2D:CF:D8:12:E0:7E:09:04:F4:A7:
        13:4C:29:42:62:DC:3E:51:5F:65:5B:6C:64:5D:9C:90:
        8E:37:34:F9:B0:B3:77:87:63:90:20:CE:89:49:C9:6E:
        D4:6A:D3:25:25:6D:5A:80:F8:8C:D1:B2:04:E1:94:DE:
        FA:D8:46:2D:D8:71:ED:B5:62:FB:13:8F:BE:2D:AD:CD: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
        extendedKeyUsage
        codeSigning: msCodeCom
        2.5.29.4
        msCodeCom: 0x80
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        nsCertType: 0x10
    - RSA-SHA1:
```
18 e2 7f 4b ae d6 9a 18  51 40 86 c7 39 fc be 1d  |...K....Q@..9...|
93 22 3d 2a b3 1e 20 b6  04 9e 27 5d a8 34 25 ee  |."=*.. ...'].4%.|
b8 e2 4d 3f 65 e6 eb fc  63 b1 04 9d 47 1a 17 60  |..M?e...c...G..`|
59 9c 8b ac 4b 71 6d d3  12 26 55 b9 59 5a d4 2d  |Y...Kqm..&U.YZ.-|
ab 6b c9 b9 38 87 17 44  09 0c ca e4 62 04 a9 19  |.k..8..D....b...|
84 8c ce 9d 03 78 cf ad  7e 97 65 41 5c a2 a4 1b  |.....x..~.eA\...|
8c 15 02 32 da 63 3c 2f  da 14 27 b5 7f 0a 47 93  |...2.c
```
  - Certificate #3
    - 2
      - 34:4E:D5:57:20:D5:ED:EC:49:F4:2F:CE:37:DB:2B:6D
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: thawte, Inc.
        OU: Certification Services Division
        OU: (c) 2006 thawte, Inc. - For authorized use only
        CN: thawte Primary Root CA
      - 2006-11-17 00:00:00 UTC: 2036-07-16 23:59:59 UTC
      - Subject
        C: US
        O: thawte, Inc.
        OU: Certification Services Division
        OU: (c) 2006 thawte, Inc. - For authorized use only
        CN: thawte Primary Root CA
      - #5
        rsaEncryption: nil
        AC:A0:F0:FB:80:59:D4:9C:C7:A4:CF:9D:A1:59:73:09:
        10:45:0C:0D:2C:6E:68:F1:6C:5B:48:68:49:59:37:FC:
        0B:33:19:C2:77:7F:CC:10:2D:95:34:1C:E6:EB:4D:09:
        A7:1C:D2:B8:C9:97:36:02:B7:89:D4:24:5F:06:C0:CC:
        44:94:94:8D:02:62:6F:EB:5A:DD:11:8D:28:9A:5C:84:
        90:10:7A:0D:BD:74:66:2F:6A:38:A0:E2:D5:54:44:EB:
        1D:07:9F:07:BA:6F:EE:E9:FD:4E:0B:29:F5:3E:84:A0:
        01:F1:9C:AB:F8:1C:7E:89:A4:E8:A1:D8:71:65:0D:A3:
        51:7B:EE:BC:D2:22:60:0D:B9:5B:9D:DF:BA:FC:51:5B:
        0B:AF:98:B2:E9:2E:E9:04:E8:62:87:DE:2B:C8:D7:4E:
        C1:4C:64:1E:DD:CF:87:58:BA:4A:4F:CA:68:07:1D:1C:
        9D:4A:C6:D5:2F:91:CC:7C:71:72:1C:C5:C0:67:EB:32:
        FD:C9:92:5C:94:DA:85:C0:9B:BF:53:7D:2B:09:F4:8C:
        9D:91:1F:97:6A:52:CB:DE:09:36:A4:77:D8:7B:87:50:
        44:D5:3E:6E:29:69:FB:39:49:26:1E:09:A5:80:7B:40:
        2D:EB:E8:27:85:C9:FE:61:FD:7E:E6:7C:97:1D:D5:9D: 0x010001
      - X509v3 extensions
        basicConstraints: true, true
        keyUsage: true, 6
        subjectKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
    - RSA-SHA1:
```
79 11 c0 4b b3 91 b6 fc  f0 e9 67 d4 0d 6e 45 be  |y..K......g..nE.|
55 e8 93 d2 ce 03 3f ed  da 25 b0 1d 57 cb 1e 3a  |U.....?..%..W..:|
76 a0 4c ec 50 76 e8 64  72 0c a4 a9 f1 b8 8b d6  |v.L.Pv.dr.......|
d6 87 84 bb 32 e5 41 11  c0 77 d9 b3 60 9d eb 1b  |....2.A..w..`...|
d5 d1 6e 44 44 a9 a6 01  ec 55 62 1d 77 b8 5c 8e  |..nDD....Ub.w.\.|
48 49 7c 9c 3b 57 11 ac  ad 73 37 8e 2f 78 5c 90  |HI|.;W...s7./x\.|
68 47 d9 60 60 e6 fc 07  3d 22 20 17 c4 f7 16 e9  |hG.``...=" .....|
c4 d8 72 f9 c8 73 7c df  16 2f 15 a9 3e fd 6a 27  |..r..s|../..>.j'|
b6 a1 eb 5a ba 98 1f d5  e3 4d 64 0a 9d 13 c8 61  |...Z.....Md....a|
ba f5 39 1c 87 ba b8 bd  7b 22 7f f6 fe ac 40 79  |..9.....{"....@y|
e5 ac 10 6f 3d 8f 1b 79  76 8b c4 37 b3 21 18 84  |...o=..yv..7.!..|
e5 36 00 eb 63 20 99 b9  e9 fe 33 04 bb 41 c8 c1  |.6..c ....3..A..|
02 f9 44 63 20 9e 81 ce  42 d3 d6 3f 2c 76 d3 63  |..Dc ...B..?,v.c|
9c 59 dd 8f a6 e1 0e a0  2e 41 f7 2e 95 47 cf bc  |.Y.......A...G..|
fd 33 f3 f6 0b 61 7e 7e  91 2b 81 47 c2 27 30 ee  |.3...a~~.+.G.'0.|
a7 10 5d 37 8f 5c 39 2b  e4 04 f0 7b 8d 56 8c 68  |..]7.\9+...{.V.h|
```
  - Certificate #4
    - 2
      - 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: thawte, Inc.
        OU: Certification Services Division
        OU: (c) 2006 thawte, Inc. - For authorized use only
        CN: thawte Primary Root CA
      - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
      - Subject
        C: US
        O: Thawte, Inc.
        CN: Thawte Code Signing CA - G2
      - #5
        rsaEncryption: nil
        B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
        23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
        A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
        88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
        A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
        5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
        5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
        F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
        7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
        CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
        C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
        46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
        B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
        C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
        66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
        D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
        keyUsage: true, 6
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        extendedKeyUsage
        clientAuth: codeSigning
        subjectAltName
        CN: VeriSignMPKI-2-10
        subjectKeyIdentifier:
        d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
        authorityKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
    - RSA-SHA1:
```
56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
```
- 1
  - unnamed
    - #0
      - C: US
      - O: Thawte, Inc.
      - CN: Thawte Code Signing CA - G2
    - 78:D1:3B:C5:B8:52:17:EA:E9:61:9C:8F:C0:FA:05:62
  - SHA1: nil
  - #2
    - 1.3.6.1.4.1.311.2.1.12
      - nil
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeCom
    - messageDigest:
```
f4 3b 5c cc 57 6e 4b c1  c1 ea c3 29 3a dc b6 9e  |.;\.WnK....):...|
be 62 92 d5                                       |.b..            |
```
  - rsaEncryption:
```
2a 26 89 17 d9 d5 73 90  43 c9 28 94 5c e8 8f 3b  |*&....s.C.(.\..;|
e3 3a a7 c4 94 3f 10 36  d4 6d f3 a4 3d 79 89 d8  |.:...?.6.m..=y..|
ae 8c fb 0b ce 82 a6 71  4c fd 7e 78 d0 06 6f 78  |.......qL.~x..ox|
1a 6d ce 60 16 39 7d bf  a6 1d 77 da f5 a0 44 a3  |.m.`.9}...w...D.|
a8 8f 45 97 52 a6 04 08  c8 5e 2c 9c 83 1a a1 39  |..E.R....^,....9|
6c d8 04 f2 e3 34 61 73  c9 57 b8 f2 79 74 30 a1  |l....4as.W..yt0.|
de b1 40 a1 34 65 7b 68  d6 ca 1d c8 00 81 f3 12  |..@.4e{h........|
07 1d 10 69 68 05 e3 c5  41 2a 9f 3e 14 67 cc 5b  |...ih...A*.>.g.[|
94 f6 dc 19 62 8e 42 e7  4f 05 28 ba e2 a5 9b 96  |....b.B.O.(.....|
64 e9 4b ff 20 48 f2 86  f1 6b e0 99 ca 74 74 a7  |d.K. H...k...tt.|
f5 42 fb 8b 0d fb ce 12  3b 3f 1c 0c 8f 5c b9 69  |.B......;?...\.i|
6a 62 c8 d9 0f 7f cf d9  25 7f c7 cd d3 c9 82 50  |jb......%......P|
5c 79 b5 a4 54 9e b4 4c  a5 f0 07 81 85 92 e2 5c  |\y..T..L.......\|
90 74 6a 88 ce 4b 26 68  a1 cd 4a f5 40 18 73 b2  |.tj..K&h..J.@.s.|
47 fe 93 25 b1 b9 86 cf  84 df 76 25 2e 71 99 9a  |G..%......v%.q..|
78 05 1f d4 24 32 c6 84  25 de db 8d cd e1 7a 6e  |x...$2..%.....zn|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2012-05-27 07:04:58 UTC
        messageDigest:
        cb 8f 31 6d 8d 3a 22 b8 ba 88 b6 d1 80 cf 3e 82 |..1m.:".......>.| b4 86 07 39 |...9 |
      - rsaEncryption:
        68 c8 55 69 dc 50 19 83 6e 48 45 5f 40 4a 6d 95 |h.Ui.P..nHE_@Jm.| 61 18 3c 12 b8 dd c2 64 f5 d8 c6 4f 6f 5a 72 1f |a.<....d...OoZr.| b3 7d d4 f2 be 48 10 5d 34 fa 6f 49 0a 58 75 d5 |.}...H.]4.oI.Xu.| 9e b2 5d a6 76 c4 f8 d3 c3 55 7a 32 0b cf 8d 54 |..].v....Uz2...T| 97 71 3d 9d f1 7f 7f 74 fb c4 e6 2e 10 c3 75 cb |.q=....t......u.| 0a fe 27 e0 d0 78 7b 49 ee 00 ba 65 58 98 5c b9 |..'..x{I...eX.\.| 75 dd 1d 4d 0a 3d 2a 44 f7 12 63 44 b2 5d 0f bf |u..M.=*D..cD.]..| 06 9c 4b 30 4b 74 70 08 57 b3 0d 20 b0 92 19 c9 |..K0Ktp.W.. ....|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	25031304	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(119304) > stringtable size(130). truncated to 128

[!] string size(119296) > stringtable size(42). truncated to 40

[!] string size(119356) > stringtable size(330). truncated to 328

[!] string size(119330) > stringtable size(1250). truncated to 1248

[!] string size(119344) > stringtable size(674). truncated to 672

[!] string size(119342) > stringtable size(732). truncated to 730

[!] string size(119296) > stringtable size(172). truncated to 170

[!] string size(119366) > stringtable size(222). truncated to 220

[!] string size(119332) > stringtable size(1220). truncated to 1218

[!] string size(119332) > stringtable size(612). truncated to 610

[!] string size(119308) > stringtable size(44). truncated to 42

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x78cc193e

SuddenAttack.exe-