PeStudio
PeStudio can discover many security relevant details about any application (*.exe, *.dll, *.cpl, *.ocx, *.ax, *.sys, ...) WITHOUT starting it, like:
whether an application is 64-Bit capable
whether anonymous functions are exported
whether obsolete functions are imported
whether Data Execution Prevention (DEP) will be used
whether Address Space Layout Randomization (ASLR) is used
whether Structured Exception Handling (SEH) is used
whether an HTTP connection will be made
whether the file is obfuscated (encrypted, compressed)
and many more details...