HelloWorld_GCC44

info
MZ
PE
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	HelloWorld_GCC44_IA32.efi
size	13016 (0x32d8)
md5	6e6c6b831edd985b32c951b40bcca482

type	MS-DOS executable PE32 executable (EFI application) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0
num_relocs	0
header_paragraphs	0
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 4d 5a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |MZ..............|
00000010: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 80 00 00 00  |................|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000080:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	8.8
SizeOfCode	0x2a20
SizeOfInitializedData	0xa0
SizeOfUninitializedData	0
AddressOfEntryPoint	0x240
BaseOfCode	0x240
BaseOfData	0x2c60
ImageBase	0
SectionAlignment	0x20
FileAlignment	0x20
OperatingSystemVersion	0.0
ImageVersion	0.0
SubsystemVersion	0.0
Reserved1	0
SizeOfImage	0x2f00
SizeOfHeaders	0x240
CheckSum	0x878c
Subsystem	0xa
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0
SizeOfHeapCommit	0
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x240	0x2a20	0x2a20	R-X CODE
.data	0x2c60	0xa0	0xa0	RW- IDATA
.reloc	0x2d00	0x140	0x140	R-- IDATA DISCARDABLE
.debug	0x2e40	0xc0	0xc0	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0	0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x2f00	0x3d8
BASERELOC	0x2d00	0x140
DEBUG	0x2e40	0xc0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=PkRoot

serial: 49B81CCC0F95C6BF40E091F0B42698DA

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:1c:cc:0f:95:c6:bf:40:e0:91:f0:b4:26:98:da
        Signature Algorithm: md5WithRSAEncryption
        Issuer: CN=PkRoot
        Validity
            Not Before: Feb  2 23:21:11 2012 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=KekRoot
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:af:a7:a1:e2:28:21:ad:3f:8e:ab:f7:7a:9d:be:
                    f5:be:33:e0:a3:20:6a:53:ec:6d:ce:37:68:1e:a2:
                    7e:29:f2:a8:f7:95:9c:3e:d2:01:d1:d5:6a:0b:72:
                    bf:05:bc:de:bd:12:21:fb:6b:2d:4b:10:48:f3:31:
                    92:bf:24:45:4b:aa:f1:2a:45:b1:ca:cf:c9:15:79:
                    7d:db:44:18:79:70:69:f9:14:ce:cd:ea:36:ac:fc:
                    5e:f0:75:45:d1:c7:86:4f:2d:37:bf:33:87:21:0d:
                    f5:0a:b4:bb:99:10:03:5f:48:28:ea:2f:7c:17:29:
                    80:c2:78:16:bd:48:7c:b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                09...?C...gZ...x..M...0.1.0..U....PkRoot......A>..BJ......
    Signature Algorithm: md5WithRSAEncryption
         27:3b:87:a3:9c:c9:f5:ca:2c:37:a0:44:cf:76:0d:2c:62:9a:
         88:cc:f7:8c:47:62:4b:79:fd:6f:ae:ad:5d:70:ae:f7:b9:11:
         49:8d:cf:3d:a0:19:9b:f1:d3:2c:cf:db:95:5a:be:16:36:75:
         26:14:0c:19:6f:b3:24:33:15:35:74:68:49:43:0e:66:90:12:
         12:09:85:97:24:00:7b:82:b1:ee:35:7e:84:4a:03:1c:49:bd:
         82:4d:64:7a:61:76:3a:6c:0b:cf:82:ce:a9:c0:f9:91:c4:27:
         ab:90:0c:2f:c3:ca:a0:19:e0:aa:8f:2f:74:28:fe:2e:a5:30:
         4e:ab

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA256

52 98 b3 51 73 de 27 2c ed c4 06 54 e6 6d f5 dc |R..Qs.',...T.m..| be 46 56 d0 cb 0f f6 df 34 a2 ff b4 18 df bd 8a |.FV.....4.......|

2
- 49:B8:1C:CC:0F:95:C6:BF:40:E0:91:F0:B4:26:98:DA
- RSA-MD5: nil
- CN: PkRoot
- 2012-02-02 23:21:11 UTC: 2039-12-31 23:59:59 UTC
- CN: KekRoot
- #5
  - rsaEncryption: nil
  - AF:A7:A1:E2:28:21:AD:3F:8E:AB:F7:7A:9D:BE:F5:BE:
    33:E0:A3:20:6A:53:EC:6D:CE:37:68:1E:A2:7E:29:F2:
    A8:F7:95:9C:3E:D2:01:D1:D5:6A:0B:72:BF:05:BC:DE:
    BD:12:21:FB:6B:2D:4B:10:48:F3:31:92:BF:24:45:4B:
    AA:F1:2A:45:B1:CA:CF:C9:15:79:7D:DB:44:18:79:70:
    69:F9:14:CE:CD:EA:36:AC:FC:5E:F0:75:45:D1:C7:86:
    4F:2D:37:BF:33:87:21:0D:F5:0A:B4:BB:99:10:03:5F:
    48:28:EA:2F:7C:17:29:80:C2:78:16:BD:48:7C:B1:23: 0x010001
- 2.5.29.1
  - ec 3f 43 84 e8 a7 67 5a 08 c5 de 78 fd 8c 4d 92 |.?C...gZ...x..M.|
    - CN: PkRoot
    - bf b7 f6 f0 41 3e 92 86 42 4a c4 01 06 dd 95 d3 |....A>..BJ......|

RSA-MD5:

27 3b 87 a3 9c c9 f5 ca  2c 37 a0 44 cf 76 0d 2c  |';......,7.D.v.,|
62 9a 88 cc f7 8c 47 62  4b 79 fd 6f ae ad 5d 70  |b.....GbKy.o..]p|
ae f7 b9 11 49 8d cf 3d  a0 19 9b f1 d3 2c cf db  |....I..=.....,..|
95 5a be 16 36 75 26 14  0c 19 6f b3 24 33 15 35  |.Z..6u&...o.$3.5|
74 68 49 43 0e 66 90 12  12 09 85 97 24 00 7b 82  |thIC.f......$.{.|
b1 ee 35 7e 84 4a 03 1c  49 bd 82 4d 64 7a 61 76  |..5~.J..I..Mdzav|
3a 6c 0b cf 82 ce a9 c0  f9 91 c4 27 ab 90 0c 2f  |:l.........'.../|
c3 ca a0 19 e0 aa 8f 2f  74 28 fe 2e a5 30 4e ab  |......./t(...0N.|

#0
- CN: PkRoot
- 49:B8:1C:CC:0F:95:C6:BF:40:E0:91:F0:B4:26:98:DA
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

f0 ed 7b 6f 69 a5 53 0c  0e 5d 19 9f 94 f5 29 6a  |..{oi.S..]....)j|
66 fc e0 9e b2 ef 40 d0  85 56 aa 92 c6 aa 4b a9  |f.....@..V....K.|

rsaEncryption:

ac 9d 5a 87 f5 98 8d b7  2a 8d 14 3b 91 84 10 5a  |..Z.....*..;...Z|
42 6b cc 40 fb 09 50 f4  e6 ba 04 59 83 02 80 97  |Bk.@..P....Y....|
93 5a 25 ab d4 9a 2f 91  88 ff 99 5c b6 87 a8 f7  |.Z%.../....\....|
ab b0 d4 b6 90 66 3b 8f  c8 0b 89 dc ca c7 b5 63  |.....f;........c|
80 cd 42 f5 77 9c ba c7  79 f5 a6 0d 84 7e ee b5  |..B.w...y....~..|
9e 12 02 04 49 88 00 96  93 66 fe 99 6c cc 2a 2a  |....I....f..l.**|
e1 2e 24 b5 c9 13 87 a5  6e d4 9a d9 84 a7 20 b9  |..$.....n..... .|
a4 a4 ef 3c 7d 0c 88 3f  9e e6 af ba 01 87 b2 bb  |...<}..?........|

show previews

offset	size	type	comment
0	12032	EXE	01/01/1970 00:00:00	#
15c1	15	HTM		#
2f00	984	PKCS7	Authenticode Signature	#

Scanning the drive for archives:
1 file, 13016 bytes (13 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

HelloWorld_GCC44_IA32.efi