NAV jelentes.exe - NAV jelentes

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	NAV jelentes.exe
size	217568 (0x351e0)
md5	a7319a33fb0e54ec5827a048f7c52c89

type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0xfc387f37
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x22
Magic	0x10b
LinkerVersion	48.0
SizeOfCode	0x29400
SizeOfInitializedData	0xb800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2b33e
BaseOfCode	0x2000
BaseOfData	0x2c000
ImageBase	0x400000
SectionAlignment	0x2000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x3a000
SizeOfHeaders	0x200
CheckSum	0x4051e
Subsystem	2
DllCharacteristics	0x8560
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x29344	0x29400	R-X CODE
.rsrc	0x2c000	0xb428	0xb600	R-- IDATA
.reloc	0x38000	0xc	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x2b2e9	0x4f
RESOURCE	0x2c000	0xb428
EXCEPTION	0	0
SECURITY	0x34e00	0x3e0
BASERELOC	0x38000	0xc
DEBUG	0x2b248	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	8
Delay_IAT	0	0
CLR_Header	0x2008	0x48

show previews

type	name	size
ICON	#1	1128
ICON	#2	2440
ICON	#3	4264
ICON	#4	9640
ICON	#5	27316
GROUP_ICON	#32512	76
VERSION	#1	828

module_name	hint	ord	function_name
mscoree.dll			_CorExeMain

StringTable 000004b0

Comments
CompanyName
FileDescription	NAV jelentes
FileVersion	1.0.0.0
InternalName	NAV jelentes.exe
LegalCopyright	Copyright © 2020
LegalTrademarks
OriginalFilename	NAV jelentes.exe
ProductName	NAV jelentes
ProductVersion	1.0.0.0
Assembly Version	1.0.0.0

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=\x00D\x00E\x00S\x00K\x00T\x00O\x00P\x00-\x006\x006\x003\x00E\x00B\x00C\x00Q\x00\\x00d\x00i\x00o\x00g\x00e

serial: 55ECFABD2C0221904D35C1973E460BF6

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ec:fa:bd:2c:02:21:90:4d:35:c1:97:3e:46:0b:f6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=\x00D\x00E\x00S\x00K\x00T\x00O\x00P\x00-\x006\x006\x003\x00E\x00B\x00C\x00Q\x00\\x00d\x00i\x00o\x00g\x00e
        Validity
            Not Before: Sep 23 21:41:56 2020 GMT
            Not After : Sep 24 03:41:56 2021 GMT
        Subject: CN=\x00D\x00E\x00S\x00K\x00T\x00O\x00P\x00-\x006\x006\x003\x00E\x00B\x00C\x00Q\x00\\x00d\x00i\x00o\x00g\x00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:a3:76:8b:54:d9:fc:43:ad:de:2f:65:9a:94:71:
                    e3:6d:7e:3d:ff:f9:63:ff:25:f6:e5:f9:25:bf:80:
                    91:ca:47:12:27:87:c0:e4:0a:f8:d9:e5:b3:b5:bf:
                    c5:4d:be:0f:2c:5e:57:0a:19:85:e6:58:5f:d6:d4:
                    8e:d2:70:ba:1e:fc:30:f3:ee:65:dd:a2:ce:a5:79:
                    51:08:b6:e3:f4:75:8d:c1:1e:30:b3:97:ef:f5:35:
                    04:f9:c5:15:9b:8f:28:32:bf:d9:ca:4e:c8:a5:0c:
                    a2:c8:c3:4e:bf:e4:13:7e:1d:46:28:37:51:6b:72:
                    3e:49:52:a7:9e:58:1c:c3:75
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
         76:c4:c4:8b:7d:89:98:f3:15:45:6d:53:46:88:c0:6e:f6:2c:
         59:3b:6f:f0:ba:b1:86:70:98:c7:c3:19:c4:15:f7:df:c3:a6:
         fe:34:9a:0f:df:f7:8e:16:20:b8:6c:6d:76:c5:66:40:9d:14:
         8b:16:72:74:eb:bf:25:85:ac:22:27:28:c5:e0:aa:b0:a3:93:
         72:22:ee:d1:d5:f3:16:27:29:94:ee:9e:c7:2f:8e:b2:2a:79:
         ca:8a:18:0f:c5:c1:f3:01:17:e1:54:d8:5b:5a:70:dc:2f:fa:
         87:93:95:4c:21:f8:be:9c:f1:d2:55:19:3d:31:ed:21:79:bc:
         a2:a2

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

a1 30 3c 82 8e ed 38 c8 fb c2 4a be ec b5 d6 8a |.0<...8...J.....| 8f 89 37 20 0e 5e a3 33 c2 ff 51 dc 2f 0c a1 b8 |..7 .^.3..Q./...|

2
- 55:EC:FA:BD:2C:02:21:90:4D:35:C1:97:3E:46:0B:F6
- RSA-SHA256: nil
- CN:
```
00 44 00 45 00 53 00 4b  00 54 00 4f 00 50 00 2d  |.D.E.S.K.T.O.P.-|
00 36 00 36 00 33 00 45  00 42 00 43 00 51 00 5c  |.6.6.3.E.B.C.Q.\|
00 64 00 69 00 6f 00 67  00 65                    |.d.i.o.g.e      |
```
- 2020-09-23 21:41:56 UTC: 2021-09-24 03:41:56 UTC
- CN:
```
00 44 00 45 00 53 00 4b  00 54 00 4f 00 50 00 2d  |.D.E.S.K.T.O.P.-|
00 36 00 36 00 33 00 45  00 42 00 43 00 51 00 5c  |.6.6.3.E.B.C.Q.\|
00 64 00 69 00 6f 00 67  00 65                    |.d.i.o.g.e      |
```
- #5
  - rsaEncryption: nil
  - A3:76:8B:54:D9:FC:43:AD:DE:2F:65:9A:94:71:E3:6D:
    7E:3D:FF:F9:63:FF:25:F6:E5:F9:25:BF:80:91:CA:47:
    12:27:87:C0:E4:0A:F8:D9:E5:B3:B5:BF:C5:4D:BE:0F:
    2C:5E:57:0A:19:85:E6:58:5F:D6:D4:8E:D2:70:BA:1E:
    FC:30:F3:EE:65:DD:A2:CE:A5:79:51:08:B6:E3:F4:75:
    8D:C1:1E:30:B3:97:EF:F5:35:04:F9:C5:15:9B:8F:28:
    32:BF:D9:CA:4E:C8:A5:0C:A2:C8:C3:4E:BF:E4:13:7E:
    1D:46:28:37:51:6B:72:3E:49:52:A7:9E:58:1C:C3:75: 0x010001

RSA-SHA256:

76 c4 c4 8b 7d 89 98 f3  15 45 6d 53 46 88 c0 6e  |v...}....EmSF..n|
f6 2c 59 3b 6f f0 ba b1  86 70 98 c7 c3 19 c4 15  |.,Y;o....p......|
f7 df c3 a6 fe 34 9a 0f  df f7 8e 16 20 b8 6c 6d  |.....4...... .lm|
76 c5 66 40 9d 14 8b 16  72 74 eb bf 25 85 ac 22  |v.f@....rt..%.."|
27 28 c5 e0 aa b0 a3 93  72 22 ee d1 d5 f3 16 27  |'(......r".....'|
29 94 ee 9e c7 2f 8e b2  2a 79 ca 8a 18 0f c5 c1  |)..../..*y......|
f3 01 17 e1 54 d8 5b 5a  70 dc 2f fa 87 93 95 4c  |....T.[Zp./....L|
21 f8 be 9c f1 d2 55 19  3d 31 ed 21 79 bc a2 a2  |!.....U.=1.!y...|

CN:

00 44 00 45 00 53 00 4b  00 54 00 4f 00 50 00 2d  |.D.E.S.K.T.O.P.-|
00 36 00 36 00 33 00 45  00 42 00 43 00 51 00 5c  |.6.6.3.E.B.C.Q.\|
00 64 00 69 00 6f 00 67  00 65                    |.d.i.o.g.e      |

55:EC:FA:BD:2C:02:21:90:4D:35:C1:97:3E:46:0B:F6

SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

cd 8b 04 fd 2a 6f 2e 4b  dc ec 82 96 f3 08 18 28  |....*o.K.......(|
80 8c 20 a7 73 12 fb 24  2b a6 95 9f fa d9 54 5f  |.. .s..$+.....T_|

rsaEncryption:

3d 3b 92 3d 57 60 7c ca  44 28 34 e6 7b 6d 0b fe  |=;.=W`|.D(4.{m..|
5a d7 0f e9 88 4b 5c f2  74 63 f2 33 f1 a6 68 31  |Z....K\.tc.3..h1|
0a 2b c3 eb 79 35 d8 65  6e f0 44 c7 2c 34 da 24  |.+..y5.en.D.,4.$|
2c 97 e9 21 e7 b9 8c d8  bc f0 f9 5d 6f 66 da 89  |,..!.......]of..|
62 0d 9b 0f a2 a3 8f 8d  e4 88 33 07 06 53 0b 04  |b.........3..S..|
2e b3 4d e3 e4 84 f3 32  3c 52 91 85 0a d2 5e 1e  |..M....2