GPackage
Static task
static1
Behavioral task
behavioral1
Sample
36f5ddd9308630bb2c4b5e19e8ba90f5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
36f5ddd9308630bb2c4b5e19e8ba90f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36f5ddd9308630bb2c4b5e19e8ba90f5_JaffaCakes118
-
Size
160KB
-
MD5
36f5ddd9308630bb2c4b5e19e8ba90f5
-
SHA1
33ecc154e3b5c3d0c15d31eac624fa9dd6468184
-
SHA256
bb010464153ac860bd32e3963ec15d585336899b5228c6554128a0e8fac2ec90
-
SHA512
72a0110019fe452b89928f866a68c3b78f50df7986fa25fdc2f373abe30531750bd305902cf1a484a2e2c6bdf2ff057b24557a285fe1c09347ff77b39c227d9b
-
SSDEEP
3072:XXoh2j5CMIBwj+kShpZYmn3dGgmy+wV9W0oDb/gmsq7lca:lCB+j+DpZ1nNYy90v/gmsq7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f5ddd9308630bb2c4b5e19e8ba90f5_JaffaCakes118
Files
-
36f5ddd9308630bb2c4b5e19e8ba90f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f871a12f62adb90133b6563a64db74c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
window
?SetItemFocus@WProperties@@UAEXH@Z
?ForceRefresh@WProperties@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?GetListItem@WPropertiesBase@@UAEPAVFTreeItem@@H@Z
?SetValue@WProperties@@UAEXPBD@Z
?GetPackageName@WConfigProperties@@UAEPBDXZ
?GetWindowClassName@WConfigProperties@@UAEXPAD@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GetCurrent@WListBox@@QAEHXZ
?GetString@WListBox@@QAE?AVFString@@H@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
??1WWizardDialog@@UAE@XZ
?OnClose@WWizardDialog@@UAEXXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?LoadFileToBitmap@@YAPAUHBITMAP__@@PBDAAH1@Z
??0WCrashBoxDialog@@QAE@PBD0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??1WCrashBoxDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WDialog@@UAEXXZ
??BWWindow@@QBEPAUHWND__@@XZ
??0WWizardPage@@QAE@PBDHPAVWWizardDialog@@@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WWindow@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBD@Z
?GetLength@WWindow@@UAEHXZ
?ResizeList@WProperties@@UAEXXZ
??1WCoolButton@@UAE@XZ
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
??1WUrlButton@@UAE@XZ
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
??0WUrlButton@@QAE@PAVWWindow@@PBDH@Z
??4FDelegate@@QAEAAU0@ABU0@@Z
?GetShow@WWizardPage@@UAEHXZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?RegSet@@YAHVFString@@00@Z
?Paste@WTerminal@@UAEXXZ
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXD@Z
?OnKeyDown@WWindow@@UAEXD@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWindow@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAD@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBDXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
??0WConfigProperties@@QAE@VFName@@PBD@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBDPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?SetCurrent@WListBox@@QAEHHH@Z
?FindStringChecked@WListBox@@QAEHPBD@Z
?AddString@WListBox@@QAEHPBD@Z
?Empty@WListBox@@QAEXXZ
?GetNextText@WWizardPage@@UAEPBDXZ
??1WListBox@@UAE@XZ
??0WListBox@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@ZH@Z
??0WEdit@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
??1WEdit@@UAE@XZ
?OnDestroy@WWindow@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?TypeChar@WTerminal@@UAEXD@Z
?OnDestroy@WLog@@UAEXXZ
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBD0@Z
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBDXZ
?OnSize@WWindow@@UAEXKHH@Z
?GetNext@WWizardPage@@UAEPAV1@XZ
?OnClose@WLog@@UAEXXZ
?OnCreate@WLog@@UAEXXZ
?GetFinishText@WWizardPage@@UAEPBDXZ
?GetCancelText@WWizardPage@@UAEPBDXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBD@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAD@Z
?GetPackageName@WLog@@UAEPBDXZ
?StaticClass@UnWinIsCdAvailable@@SAPAV1@XZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBDAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
?WindowMessageOpen@@3IA
??1WLog@@UAE@XZ
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnCancel@WWizardPage@@UAEXXZ
core
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?Flush@FArchive@@UAEXXZ
?GetError@FArchive@@UAEHXZ
?GError@@3PAVFOutputDeviceError@@A
?Logf@FOutputDevice@@QAAXPBDZZ
?GNull@@3PAVFOutputDevice@@A
??0FFileManager@@QAE@XZ
?Init@FFileManager@@UAEXH@Z
?appCmdLine@@YAPBDXZ
?appStrchr@@YAPADPBDH@Z
?appStrcat@@YAPADPADPBD@Z
?GIsSlowTask@@3HA
?appGetVarArgs@@YAHPADHAAPBD@Z
??0FFeedbackContext@@QAE@XZ
?GIsRunning@@3HA
?GLogHook@@3PAVFOutputDevice@@A
?GIsClient@@3HA
?GIsEditor@@3HA
?GIsStarted@@3HA
?GConfig@@3PAVFConfigCache@@A
?GIsCriticalError@@3HA
?GLog@@3PAVFOutputDevice@@A
?appGetSystemErrorMessage@@YAPBDH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PADA
?appStrncpy@@YAPADPADPBDH@Z
?appStrncat@@YAPADPADPBDH@Z
?GIsGuarded@@3HA
?LocalizeError@@YAPBDPBD00@Z
?appRequestExit@@YAXH@Z
??0FOutputDeviceError@@QAE@XZ
?appTimestamp@@YAPBDXZ
?Logf@FOutputDevice@@QAAXW4EName@@PBDZZ
??0FOutputDevice@@QAE@XZ
?GPageSize@@3KA
?appFailAssert@@YAXPBD0H@Z
?appUnwindf@@YAXPBDZZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?Num@FArray@@QBEHXZ
??0FMalloc@@QAE@XZ
??0FExec@@QAE@XZ
??0FNotifyHook@@QAE@XZ
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
?appInit@@YAXPBD0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZHPAUNativePackageToInit@@@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?Log@FOutputDevice@@QAEXW4EName@@PBD@Z
??HFString@@QAE?AV0@ABV0@@Z
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?appStrrchr@@YAPADPBDH@Z
?GetLanguage@UObject@@SAPBDXZ
?Shrink@FArray@@QAEXH@Z
?appLoadFileToString@@YAHAAVFString@@PBDPAVFFileManager@@@Z
??0FString@@QAE@W4ENoInit@@@Z
?InitFromExisting@FString@@QAEXPBD@Z
??YFString@@QAEAAV0@ABV0@@Z
?appSaveStringToFile@@YAHABVFString@@PBDPAVFFileManager@@@Z
??0FArchiveCountMem@@QAE@XZ
?CountBytes@FString@@QAEXAAVFArchive@@@Z
?GetMax@FArchiveCountMem@@QAEKXZ
??1FArchiveCountMem@@UAE@XZ
?Log@FOutputDevice@@QAEXPBD@Z
?appAtof@@YAMPBD@Z
?appStaticString1024@@YAPADXZ
?appAtoi@@YAHPBD@Z
?Parse@@YAHPBD0AAVFString@@@Z
??0FName@@QAE@W4EName@@@Z
?appStrfind@@YAPBDPBD0@Z
?CountBytes@FArray@@QAEXAAVFArchive@@H@Z
??6@YAAAVFArchive@@AAV0@AAVFCompactIndex@@@Z
?IsLoading@FArchive@@QAEHXZ
?Realloc@FArray@@IAEXH@Z
?Right@FString@@QBE?AV1@H@Z
?appMemCrc@@YAKPBXHK@Z
?Left@FString@@QBE?AV1@H@Z
?Mid@FString@@QBE?AV1@HH@Z
??8FString@@QBEHABV0@@Z
?appStrstr@@YAPADPBD0@Z
?Close@FArchive@@UAEHXZ
GIsMMX
?GPhysicalMemory@@3KA
GIsPentiumPro
?GetRegistryObjects@UObject@@SAXAAV?$TArray@VFRegistryObjectInfo@@@@PAVUClass@@1H@Z
??9FString@@QBEHPBD@Z
??0FArray@@IAE@HH@Z
??4FString@@QAEAAV0@ABV0@@Z
??DFString@@QBE?AV0@PBD@Z
??DFString@@QBE?AV0@ABV0@@Z
?GIsRequestingExit@@3HA
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GExec@@3PAVFExec@@A
?GetOuter@UObject@@QBEPAV1@XZ
?GetName@UObject@@QBEPBDXZ
?appStrcmp@@YAHPBD0@Z
?appMsgf@@YA?BHHPBDZZ
?appToAnsi@@YAPBDPBD@Z
?appSqrt@@YANN@Z
?StaticClass@UClass@@SAPAV1@XZ
?ParseObject@@YAHPBD0PAVUClass@@AAPAVUObject@@PAV2@@Z
?ParseCommand@@YAHPAPBDPBD@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??0FName@@QAE@PBDW4EFindName@@_N@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBDH@Z
?appClipboardCopy@@YAXPBD@Z
?appLaunchURL@@YAXPBD0PAVFString@@@Z
??1FArray@@QAE@XZ
?StaticClass@UPackage@@SAPAVUClass@@XZ
?Split@FString@@QBEHABV1@PAV1@1H@Z
?Localize@@YAPBDPBD000H@Z
??8FString@@QBEHPBD@Z
?Remove@FArray@@QAEXHHH@Z
?Insert@FArray@@QAEXHHH@Z
?Empty@FArray@@QAEXHH@Z
??0FString@@QAE@ABV0@@Z
?ByteOrderSerialize@FArchive@@QAEAAV1@PAXH@Z
??6@YAAAVFArchive@@AAV0@AAVFString@@@Z
?IsError@FArchive@@QAEHXZ
??4FString@@QAEAAV0@PBD@Z
?SafeSuppressed@FName@@SAHW4EName@@@Z
?Parse@@YAHPBD0PADH@Z
?SafeString@FName@@SAPBDW4EName@@@Z
?ParseParam@@YAHPBD0@Z
?IsA@UObject@@QBEHPAVUClass@@@Z
?Add@FArray@@QAEHHH@Z
??1FRegistryObjectInfo@@QAE@XZ
?appSprintf@@YAHPADPBDZZ
?IsChildOf@UStruct@@QBEHPBV1@@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBD2KPAVUPackageMap@@@Z
??0FArray@@QAE@XZ
?appFromAnsi@@YAPBDPBD@Z
?Printf@FString@@SA?AV1@PBDZZ
?GSys@@3PAVUSystem@@A
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
??0FArchive@@QAE@XZ
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
?appStrcpy@@YAPADPADPBD@Z
?appStricmp@@YAHPBD0@Z
?appStrlen@@YAHPBD@Z
?GSecondsPerCycle@@3NA
?LocalizeGeneral@@YAPBDPBD00@Z
?appBaseDir@@YAPBDXZ
??1FString@@QAE@XZ
?GFileManager@@3PAVFFileManager@@A
??DFString@@QBEPBDXZ
??HFString@@QAE?AV0@PBD@Z
??0FString@@QAE@PBD@Z
?appPackage@@YAPBDXZ
??YFString@@QAEAAV0@PBD@Z
??0FString@@QAE@XZ
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
?NotifyExec@FNotifyHook@@UAEXPAXPBD@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
engine
?StaticClass@URenderDevice@@SAPAVUClass@@XZ
?StaticClass@UEngine@@SAPAVUClass@@XZ
?GetLevel@AActor@@QBEPAVULevel@@XZ
?StaticClass@AActor@@SAPAVUClass@@XZ
?GUnIsCdAvailable@@3PAVUnIsCdAvailable@@A
?GetInstance@UVideoPlayerDevice@@SAPAV1@XZ
?GIsWindowOpened@@3HA
?StaticClass@UGameEngine@@SAPAVUClass@@XZ
?GstrExePath@@3PADA
pandora
?XIIIInitNativePackage@@YAXXZ
xidcine
?XIDCineInitNativePackage@@YAXXZ
xiiimp
?XIIIMPInitNativePackage@@YAXXZ
kernel32
GetLastError
GetFileSize
CreateFileA
SetFilePointer
CloseHandle
SetFileAttributesA
WriteFile
DeleteFileA
MoveFileA
GetSystemInfo
GetCurrentDirectoryA
CreateThread
VirtualAlloc
VirtualFree
ReadFile
CopyFileA
CreateDirectoryA
Sleep
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
CreateMutexA
CreateProcessA
GetCommandLineA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
user32
GetPropA
SendMessageTimeoutA
DialogBoxParamA
SetPropA
RemovePropA
GetForegroundWindow
GetWindowThreadProcessId
IsIconic
SetFocus
LoadIconA
SetForegroundWindow
EndDialog
GetParent
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
ShowWindow
PeekMessageA
TranslateMessage
MessageBoxA
PostThreadMessageA
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageA
UpdateWindow
GetMessageA
DispatchMessageA
PostQuitMessage
FindWindowExA
gdi32
DeleteObject
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
xidpawn
?XIDPAWNInitNativePackage@@YAXXZ
gui
?GUIInitNativePackage@@YAXXZ
msvcr70
_adjust_fdiv
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
_CxxThrowException
_purecall
__CxxFrameHandler
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_except_handler3
__setusermatherr
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ