test1.exe

info
MZ
PE
resources
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	test1.exe
size	11512 (0x2cf8)
md5	7a4c4ddc467bb938efa3bac5fb284759

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	9
TimeDateStamp	0x6369646e
PointerToSymbolTable	0x2600
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x12f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0xa00
SizeOfInitializedData	0x2000
SizeOfUninitializedData	0x200
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa000
SizeOfHeaders	0x400
CheckSum	0x7b4a
Subsystem	3
DllCharacteristics	0x8000
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x894	0xa00	R-X CODE IDATA
.data	0x2000	0x44	0x200	RW- IDATA
.rdata	0x3000	0x2f0	0x400	R-- IDATA
.buildid	0x4000	0x35	0x200	R-- IDATA
/4	0x5000	0x390	0x400	R-- IDATA
.bss	0x6000	0x114	0	RW- UDATA
.idata	0x7000	0x2f8	0x400	RW- IDATA
.rsrc	0x8000	0x4e8	0x600	RW- IDATA
/14	0x9000	0x14	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x7000	0x2f8
RESOURCE	0x8000	0x4e8
EXCEPTION	0	0
SECURITY	0x2620	0x6d8
BASERELOC	0	0
DEBUG	0x4000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x70b8	0x68
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	1167	0

module_name	hint	function_name
cygwin1.dll	25	__cxa_atexit
cygwin1.dll	70	__getreent
cygwin1.dll	78	__main
cygwin1.dll	201	_dll_crt0@0
cygwin1.dll	386	_impure_ptr
cygwin1.dll	807	calloc
cygwin1.dll	937	cygwin_detach_dll
cygwin1.dll	939	cygwin_internal
cygwin1.dll	960	dll_dllcrt0
cygwin1.dll	1017	exit
cygwin1.dll	1132	free
cygwin1.dll	1435	malloc
cygwin1.dll	1540	posix_memalign
cygwin1.dll	1685	putc
cygwin1.dll	1716	realloc
KERNEL32.dll	356	FreeLibrary
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	809	LoadLibraryA
cygncursesw-10.dll	476	ncwrap_cur_term
cygncursesw-10.dll	565	setupterm
cygncursesw-10.dll	623	tigetstr
cygncursesw-10.dll	630	tputs

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=TW/ST=Taiwan/L=Hsinchu/O=Nuvoton Technology Corp./OU=CS00/CN=LCChen's OpenSSL CA/emailAddress=lcchen@nuvoton.com

serial: 04

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=TW, ST=Taiwan, L=Hsinchu, O=Nuvoton Technology Corp., OU=CS00, CN=LCChen's OpenSSL CA/emailAddress=lcchen@nuvoton.com
        Validity
            Not Before: Jun  7 05:45:54 2016 GMT
            Not After : Jun  7 05:45:54 2017 GMT
        Subject: C=TW, ST=Taiwan, O=Nuvoton Technology Corp., OU=CS00, CN=LCChen_RSA_Test
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:93:0d:83:4d:fa:be:8a:d0:bb:98:a0:2d:
                    a9:45:a1:09:44:49:85:1d:de:ca:9e:12:6a:1e:7a:
                    1b:06:99:f9:a4:6d:01:ca:6b:34:d3:6c:39:5d:96:
                    85:1b:a1:08:13:87:35:d6:59:ae:ab:7f:bb:68:38:
                    5f:eb:fa:8d:76:1f:df:6a:1a:59:24:90:be:7a:02:
                    95:89:07:0b:63:bc:f3:39:64:72:c3:44:ce:2f:da:
                    bb:f9:9f:65:b3:5f:80:8e:05:49:fc:46:4b:2e:d7:
                    05:b1:f6:fd:02:e8:02:b2:b9:b0:d3:41:d0:9e:e5:
                    89:46:7b:06:97:49:10:d8:20:c7:80:b1:a9:fe:25:
                    b3:46:4c:a9:4c:fe:5f:38:2f:3b:a3:df:e7:65:be:
                    76:76:e6:9f:2a:62:bf:df:43:33:ce:e5:a7:75:cb:
                    8f:b6:d5:21:0e:ec:a9:3a:d3:21:3b:cf:51:1e:4e:
                    e1:5a:aa:d8:56:39:0d:49:b1:c6:5d:30:20:48:06:
                    78:11:2a:1d:28:44:4c:c9:41:8c:d4:b0:e5:4f:79:
                    0b:44:e3:f1:07:8e:40:71:7d:4f:a9:13:61:cd:d3:
                    bc:9f:1b:09:ff:eb:29:3a:e2:91:60:2d:0f:a6:ef:
                    8c:1b:47:9f:af:93:4f:39:e5:c7:84:4a:60:8c:61:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Subject Key Identifier: 
                6E:36:70:39:B9:C3:22:50:E6:97:07:15:5E:23:44:7D:B1:1B:3E:00
            X509v3 Authority Key Identifier: 
                keyid:2C:39:76:0F:58:E4:F1:39:85:3F:41:AA:53:92:61:24:2A:DE:12:ED

            X509v3 Subject Alternative Name: 
                <EMPTY>

            X509v3 Issuer Alternative Name: 
                <EMPTY>

            Netscape Comment: 
                OpenSSL Generated Certificate
    Signature Algorithm: sha256WithRSAEncryption
         d2:9f:15:a7:d0:3c:33:67:99:55:ab:77:6e:a2:00:ff:26:5a:
         c4:ea:9e:bd:2c:47:67:15:cb:68:d1:65:28:c7:01:4c:c5:ce:
         96:d9:7c:f6:6a:b5:c4:08:35:26:9d:cf:02:eb:ea:04:80:a2:
         44:23:75:d0:d1:3a:e8:db:3e:d0:c4:d8:79:ff:90:25:81:f9:
         de:98:7c:da:fe:08:67:46:29:08:17:fc:5a:60:7b:9b:7a:fb:
         8b:35:eb:f3:e4:6e:44:b3:1c:f6:03:72:ad:f4:e9:a9:22:a2:
         47:a2:e9:03:4e:95:c9:4d:94:e7:de:03:cd:cf:ae:06:f7:cf:
         8f:31:8f:6f:23:08:ff:2e:a1:99:e5:1d:f4:fc:f0:3e:47:bc:
         35:e8:f0:a8:53:0a:2e:93:a0:bb:50:64:dd:61:28:2d:b4:2c:
         a5:d0:e6:40:31:ed:08:ea:7a:74:fc:73:db:d7:79:df:bb:9a:
         0d:ae:7c:73:93:c4:77:58:f3:c5:67:bf:dd:19:e5:1f:6e:b4:
         da:dd:9d:70:c1:98:0e:86:9b:bf:f4:16:ef:e6:d5:8a:df:4c:
         20:db:d2:a9:ee:12:7d:34:80:32:db:63:a0:62:44:11:05:38:
         ac:8e:83:f5:37:ac:d8:57:fb:e8:d3:13:0a:37:c5:48:60:1e:
         de:88:a4:98

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

b0 8b 85 a3 f5 e0 e5 6d 25 d8 bc 89 64 4e ac 30 |.......m%...dN.0| c5 06 53 93 |..S. |

Certificate #2

2
- 4
- RSA-SHA256: nil
- Issuer
  - C: TW
  - ST: Taiwan
  - L: Hsinchu
  - O: Nuvoton Technology Corp.
  - OU: CS00
  - CN: LCChen's OpenSSL CA
  - emailAddress: lcchen@nuvoton.com
- 2016-06-07 05:45:54 UTC: 2017-06-07 05:45:54 UTC
- Subject
  - C: TW
  - ST: Taiwan
  - O: Nuvoton Technology Corp.
  - OU: CS00
  - CN: LCChen_RSA_Test
- #5
  - rsaEncryption: nil
  - B7:33:93:0D:83:4D:FA:BE:8A:D0:BB:98:A0:2D:A9:45:
    A1:09:44:49:85:1D:DE:CA:9E:12:6A:1E:7A:1B:06:99:
    F9:A4:6D:01:CA:6B:34:D3:6C:39:5D:96:85:1B:A1:08:
    13:87:35:D6:59:AE:AB:7F:BB:68:38:5F:EB:FA:8D:76:
    1F:DF:6A:1A:59:24:90:BE:7A:02:95:89:07:0B:63:BC:
    F3:39:64:72:C3:44:CE:2F:DA:BB:F9:9F:65:B3:5F:80:
    8E:05:49:FC:46:4B:2E:D7:05:B1:F6:FD:02:E8:02:B2:
    B9:B0:D3:41:D0:9E:E5:89:46:7B:06:97:49:10:D8:20:
    C7:80:B1:A9:FE:25:B3:46:4C:A9:4C:FE:5F:38:2F:3B:
    A3:DF:E7:65:BE:76:76:E6:9F:2A:62:BF:DF:43:33:CE:
    E5:A7:75:CB:8F:B6:D5:21:0E:EC:A9:3A:D3:21:3B:CF:
    51:1E:4E:E1:5A:AA:D8:56:39:0D:49:B1:C6:5D:30:20:
    48:06:78:11:2A:1D:28:44:4C:C9:41:8C:D4:B0:E5:4F:
    79:0B:44:E3:F1:07:8E:40:71:7D:4F:A9:13:61:CD:D3:
    BC:9F:1B:09:FF:EB:29:3A:E2:91:60:2D:0F:A6:EF:8C:
    1B:47:9F:AF:93:4F:39:E5:C7:84:4A:60:8C:61:6A:0B: 0x010001
- X509v3 extensions
  - basicConstraints
    - nil
  - keyUsage: 0xe0
  - subjectKeyIdentifier:
```
6e 36 70 39 b9 c3 22 50  e6 97 07 15 5e 23 44 7d  |n6p9.."P....^#D}|
b1 1b 3e 00                                       |..>.            |
```
  - authorityKeyIdentifier:
```
2c 39 76 0f 58 e4 f1 39  85 3f 41 aa 53 92 61 24  |,9v.X..9.?A.S.a$|
2a de 12 ed                                       |*...            |
```
  - subjectAltName
    - nil
  - issuerAltName
    - nil
  - nsComment: OpenSSL Generated Certificate

RSA-SHA256:

d2 9f 15 a7 d0 3c 33 67  99 55 ab 77 6e a2 00 ff  |.....<3g.U.wn...|
26 5a c4 ea 9e bd 2c 47  67 15 cb 68 d1 65 28 c7  |&Z....,Gg..h.e(.|
01 4c c5 ce 96 d9 7c f6  6a b5 c4 08 35 26 9d cf  |.L....|.j...5&..|
02 eb ea 04 80 a2 44 23  75 d0 d1 3a e8 db 3e d0  |......D#u..:..>.|
c4 d8 79 ff 90 25 81 f9  de 98 7c da fe 08 67 46  |..y..%....|...gF|
29 08 17 fc 5a 60 7b 9b  7a fb 8b 35 eb f3 e4 6e  |)...Z`{.z..5...n|
44 b3 1c f6 03 72 ad f4  e9 a9 22 a2 47 a2 e9 03  |D....r....".G...|
4e 95 c9 4d 94 e7 de 03  cd cf ae 06 f7 cf 8f 31  |N..M...........1|
8f 6f 23 08 ff 2e a1 99  e5 1d f4 fc f0 3e 47 bc  |.o#..........>G.|
35 e8 f0 a8 53 0a 2e 93  a0 bb 50 64 dd 61 28 2d  |5...S.....Pd.a(-|
b4 2c a5 d0 e6 40 31 ed  08 ea 7a 74 fc 73 db d7  |.,...@1...zt.s..|
79 df bb 9a 0d ae 7c 73  93 c4 77 58 f3 c5 67 bf  |y.....|s..wX..g.|
dd 19 e5 1f 6e b4 da dd  9d 70 c1 98 0e 86 9b bf  |....n....p......|
f4 16 ef e6 d5 8a df 4c  20 db d2 a9 ee 12 7d 34  |.......L .....}4|
80 32 db 63 a0 62 44 11  05 38 ac 8e 83 f5 37 ac  |.2.c.bD..8....7.|
d8 57 fb e8 d3 13 0a 37  c5 48 60 1e de 88 a4 98  |.W.....7.H`.....|

unnamed
- #0
  - C: TW
  - ST: Taiwan
  - L: Hsinchu
  - O: Nuvoton Technology Corp.
  - OU: CS00
  - CN: LCChen's OpenSSL CA
  - emailAddress: lcchen@nuvoton.com
- 4
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

d5 42 0e a0 8f 6e e6 98  2b ae bd fe ce f3 f2 0e  |.B...n..+.......|
e1 d3 40 af                                       |..@.            |

rsaEncryption:

59 43 46 d3 7a e0 8c bc  14 c1 4d e9 c1 58 8c 26  |YCF.z.....M..X.&|
f4 36 ab f4 12 57 97 60  ef 93 8b 45 64 6e 09 18  |.6...W.`...Edn..|
c1 e0 aa 56 62 8a 6d e9  25 a2 08 8a 99 50 0a 1e  |...Vb.m.%....P..|
c3 0b 2f 81 36 ec e8 ac  b7 da bf b0 3b 61 73 2e  |../.6.......;as.|
d8 16 93 6b f4 74 d5 3c  24 02 85 1c 6b 88 e6 f1  |...k.t.<$...k...|
58 fd 81 0a 04 92 c9 66  4e b9 19 ed 2a fc 2e dd  |X......fN...*...|
e4 51 fa 6b 13 52 15 cb  ef 6e bd be 29 45 45 ba  |.Q.k.R...n..)EE.|
67 20 26 8b 7d 29 78 b3  2f 9a 2f 17 14 6a a9 26  |g &.})x././..j.&|
74 6d f2 c1 38 f3 88 47  03 67 ff f8 b6 df cf a7  |tm..8..G.g......|
94 77 77 78 3c 72 9c 28  93 40 c9 75 ee d7 7a f0  |.wwx

show previews

offset	size	type	comment
0	9728	EXE	11/07/2022 20:02:54	#
15c1	15	HTM		#
2600	1784	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK