Static task
static1
Behavioral task
behavioral1
Sample
4109210b4102d982b2d298858fba4bcc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4109210b4102d982b2d298858fba4bcc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4109210b4102d982b2d298858fba4bcc_JaffaCakes118
-
Size
853KB
-
MD5
4109210b4102d982b2d298858fba4bcc
-
SHA1
45f2def39265da1e39698be1de25b324dff91498
-
SHA256
e6bc398336412e09f1d7cb6a04a605a95adfe2925384fa728034a6041063d298
-
SHA512
d57326bf4993cfe602094ef3b1fd6d79fb3335b78d3c08e04e178795f71530bb9ac474df2884fbdf8d1f558682f4069b98d7919ce0e452fc4874ba7d33f362e4
-
SSDEEP
24576:A3cV33Pobjm1Xduh3uLrzsSi8KpWejbGCbxgEDQv:AMabjmZcmrzpiHpJiCtgED+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4109210b4102d982b2d298858fba4bcc_JaffaCakes118
Files
-
4109210b4102d982b2d298858fba4bcc_JaffaCakes118.exe windows:5 windows x86 arch:x86
da663de1aae8e45d3df354153e61caa4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessWorkingSetSize
GetConsoleMode
FileTimeToSystemTime
GetSystemTimeAsFileTime
GlobalDeleteAtom
GetDateFormatA
WriteProfileStringA
GetConsoleCP
CreateDirectoryA
FindClose
SetFileTime
SetConsoleCtrlHandler
SetHandleCount
CloseHandle
LocalUnlock
LocalAlloc
GlobalSize
CreateProcessA
MulDiv
TerminateProcess
GetFileInformationByHandle
CreateMutexA
InterlockedDecrement
FreeEnvironmentStringsA
LCMapStringA
CreateFileA
GetTempPathA
WriteConsoleA
GetCurrentDirectoryA
WriteConsoleW
GetLocaleInfoW
GetComputerNameA
MapViewOfFile
GlobalFindAtomA
CompareStringW
TlsGetValue
InitializeCriticalSection
FreeResource
GlobalGetAtomNameA
WaitForSingleObject
TlsAlloc
ReleaseMutex
MoveFileA
OpenFile
SetFileAttributesA
GetStringTypeA
GetLocaleInfoA
GetPrivateProfileSectionA
GetDriveTypeA
EnumCalendarInfoA
lstrcpynA
IsBadWritePtr
SetErrorMode
LocalFileTimeToFileTime
GlobalFlags
CompareStringA
ReleaseSemaphore
GetTimeZoneInformation
GetShortPathNameA
LocalFree
RemoveDirectoryA
DeleteCriticalSection
FreeEnvironmentStringsW
ConvertDefaultLocale
WriteFile
LoadResource
WinExec
GlobalAddAtomA
SetThreadPriority
EnumResourceLanguagesA
TlsSetValue
GlobalMemoryStatus
GetFullPathNameA
lstrcmpiA
InitializeCriticalSectionAndSpinCount
GlobalMemoryStatusEx
GetCurrentThreadId
GetUserDefaultLCID
GlobalReAlloc
SetEnvironmentVariableA
SetHandleInformation
SetEvent
DuplicateHandle
Sleep
InterlockedCompareExchange
GetProcessHeap
WaitForMultipleObjects
GetCommandLineA
HeapSize
GetConsoleOutputCP
QueryPerformanceCounter
GetAtomNameA
GetFileAttributesA
CreatePipe
FindResourceA
LoadLibraryW
LocalReAlloc
FormatMessageA
VirtualQuery
ExpandEnvironmentStringsA
GetVersionExA
_lwrite
GetModuleHandleW
GetFileSize
GetDiskFreeSpaceA
SizeofResource
GetStartupInfoA
WritePrivateProfileStringA
FlushFileBuffers
LocalLock
lstrcpyA
ResumeThread
GetModuleHandleA
HeapAlloc
IsValidLocale
EnumSystemLocalesA
SetStdHandle
DeleteFileA
GetStdHandle
GetPrivateProfileStringA
ExitProcess
GetTempFileNameA
GetProcessWorkingSetSize
SuspendThread
VirtualFree
LoadLibraryExA
GetOEMCP
SetEnvironmentVariableW
GetCurrentThread
FileTimeToLocalFileTime
lstrlenA
GetVersion
GlobalFree
GetThreadLocale
GetCurrentProcessId
SystemTimeToFileTime
InterlockedExchange
lstrcatA
CreateFileMappingA
IsDBCSLeadByte
UnhandledExceptionFilter
LeaveCriticalSection
CreateEventA
GetPrivateProfileSectionNamesA
GetWindowsDirectoryA
GetFileType
IsValidCodePage
ExitThread
LCMapStringW
SetEndOfFile
CreateFileW
GetTickCount
GetModuleFileNameW
TlsFree
GetLastError
SetFilePointer
CreateSemaphoreA
_lclose
GetCurrentProcess
RaiseException
GetFileTime
MultiByteToWideChar
HeapDestroy
GetProcAddress
GetTimeFormatA
GetEnvironmentStringsW
HeapCreate
GlobalAlloc
QueryPerformanceFrequency
GetSystemInfo
HeapReAlloc
RtlUnwind
HeapFree
GlobalUnlock
UnlockFile
GetFileSizeEx
SetLastError
SearchPathA
GetCPInfo
FatalAppExitA
WideCharToMultiByte
OutputDebugStringA
LockResource
FindResourceExA
SetCurrentDirectoryA
GetEnvironmentStrings
FreeLibrary
GetSystemDirectoryW
GetProfileIntA
GlobalLock
GetVolumeInformationA
LoadLibraryA
UnmapViewOfFile
ReadFile
GetFileAttributesExA
VirtualProtect
SetUnhandledExceptionFilter
LockFile
GetStringTypeExA
GetModuleFileNameA
IsDebuggerPresent
CreateThread
lstrcmpA
GlobalHandle
lstrcmpW
lstrlenW
VirtualAlloc
EnterCriticalSection
FindFirstFileA
GetPrivateProfileIntA
GetStringTypeW
FindNextFileA
CopyFileA
InterlockedIncrement
GetACP
user32
GetScrollPos
UnhookWindowsHookEx
SetWindowLongA
DrawIconEx
GetKeyNameTextA
GetMenuItemInfoA
ShowOwnedPopups
MenuItemFromPoint
ScrollWindow
GetNextDlgTabItem
BeginPaint
SetParent
DeferWindowPos
GetAsyncKeyState
ModifyMenuA
SendMessageA
GetWindowLongA
PeekMessageA
BringWindowToTop
InvertRect
GetUpdateRect
DestroyIcon
SetTimer
SendMessageTimeoutA
GetWindowPlacement
GetScrollInfo
SetWindowPos
GetClipboardData
CheckRadioButton
RedrawWindow
GetScrollRange
UpdateLayeredWindow
InflateRect
GetSubMenu
PostMessageA
IsZoomed
LoadImageA
CharUpperA
CallNextHookEx
GetMenuDefaultItem
CopyImage
InvalidateRgn
VkKeyScanA
HideCaret
LoadCursorA
LoadStringA
CreateAcceleratorTableA
LoadIconA
MapVirtualKeyA
MapVirtualKeyExA
GetTopWindow
GetDesktopWindow
GetPropA
DrawStateA
DefFrameProcA
EnumWindows
WindowFromDC
GetMenuItemRect
OffsetRect
SetScrollRange
SetFocus
IsWindow
EndDeferWindowPos
DialogBoxIndirectParamA
ShowWindow
GetDialogBaseUnits
SetWindowTextA
UnregisterClassA
MsgWaitForMultipleObjects
DispatchMessageA
FillRect
SetPropA
GetLastActivePopup
GetDlgCtrlID
DrawEdge
SendInput
GetClassInfoA
GetMenuItemCount
DeleteMenu
GetMenuCheckMarkDimensions
IsWindowVisible
DestroyAcceleratorTable
SetWindowsHookExA
UpdateWindow
InSendMessage
SetCursorPos
IsClipboardFormatAvailable
SetClipboardData
WinHelpA
FindWindowExA
GetWindowRgn
LockWindowUpdate
EndPaint
TranslateAcceleratorA
BeginDeferWindowPos
CreatePopupMenu
RegisterClassA
TranslateMDISysAccel
MapDialogRect
DefWindowProcA
TabbedTextOutA
CharNextA
InsertMenuA
MessageBoxA
DestroyWindow
GetWindowDC
IsChild
ShowScrollBar
SendDlgItemMessageA
WindowFromPoint
SetScrollInfo
GetSystemMenu
wsprintfA
GetMessageA
InvalidateRect
GetWindow
ScrollWindowEx
AdjustWindowRectEx
EnableMenuItem
GrayStringA
GetKeyboardState
GetNextDlgGroupItem
SetCapture
PostQuitMessage
IsWindowEnabled
LoadAcceleratorsA
MapWindowPoints
PtInRect
SetMenuItemInfoA
CharUpperBuffA
NotifyWinEvent
CreateDialogIndirectParamA
GetWindowRect
MoveWindow
PostThreadMessageA
MessageBeep
DrawIcon
KillTimer
CreateIconIndirect
SetRect
SetDlgItemTextA
GetMenuState
EndDialog
SetScrollPos
IntersectRect
GetClientRect
SetWindowContextHelpId
CopyRect
ToAsciiEx
TrackPopupMenu
DefMDIChildProcA
GetFocus
CopyIcon
GetParent
ReleaseCapture
SetCursor
DrawFocusRect
SetActiveWindow
GetKeyboardLayout
GetDCEx
DestroyMenu
RegisterClipboardFormatA
EnableWindow
MessageBoxW
GetMenuItemID
LoadBitmapA
CloseClipboard
OpenClipboard
SubtractRect
CallWindowProcA
WaitMessage
RemoveMenu
ScreenToClient
SetForegroundWindow
EqualRect
GetMenu
ChangeDisplaySettingsA
IsDialogMessageA
GetKeyState
CopyAcceleratorTableA
FlashWindow
CheckMenuItem
GetWindowTextLengthA
TrackPopupMenuEx
GetClassNameA
ChildWindowFromPointEx
IsIconic
GetTabbedTextExtentA
GetDlgItem
GetForegroundWindow
GetSysColor
AppendMenuA
GetClassInfoExA
keybd_event
SetMenuDefaultItem
GetWindowTextA
LoadMenuA
CheckDlgButton
ReuseDDElParam
IsDlgButtonChecked
CloseWindow
SetDlgItemInt
TranslateMessage
SystemParametersInfoA
SetRectEmpty
GetClassLongA
ClientToScreen
GetCapture
GetWindowThreadProcessId
GetDoubleClickTime
IsCharLowerA
LoadKeyboardLayoutA
DrawFrameControl
UnionRect
DrawTextA
GetCaretPos
GetMessageTime
EnumChildWindows
SetWindowRgn
EnableScrollBar
EmptyClipboard
GetIconInfo
GetDlgItemInt
ReleaseDC
GetSysColorBrush
CreateWindowExA
GetMessagePos
SetMenu
SendNotifyMessageA
UnpackDDElParam
IsMenu
GetDlgItemTextA
RemovePropA
SetMenuItemBitmaps
SetClassLongA
CreateIconFromResource
RegisterWindowMessageA
SetWindowPlacement
GetActiveWindow
GetMenuStringA
DrawMenuBar
DrawTextExA
FrameRect
CreateMenu
GetMenuBarInfo
GetDC
DestroyCursor
GetCursorPos
IsRectEmpty
ClipCursor
GetSystemMetrics
InsertMenuItemA
ValidateRect
SetCaretPos
gdi32
CreateFontA
SelectClipPath
SelectClipRgn
PolyBezierTo
GetTextColor
GetDIBits
GetDCOrgEx
SetColorAdjustment
SetGraphicsMode
ScaleWindowExtEx
CreateHatchBrush
PlayMetaFileRecord
GetBoundsRect
Escape
SetDIBitsToDevice
GetPolyFillMode
SetPaletteEntries
SetDIBColorTable
GetDIBColorTable
GetClipRgn
CreateRoundRectRgn
DPtoLP
Arc
PolylineTo
SetArcDirection
StretchDIBits
GetTextFaceA
GetBkMode
ExtTextOutA
GetTextExtentPoint32A
CreateRectRgnIndirect
UnrealizeObject
SetViewportExtEx
SetStretchBltMode
GetPixel
RoundRect
CreateCompatibleDC
ModifyWorldTransform
LPtoDP
FrameRgn
EndDoc
CreateFontIndirectA
DeleteDC
GetTextAlign
GetCharWidthA
GetPaletteEntries
CombineRgn
GetObjectA
CreateDIBPatternBrushPt
DeleteMetaFile
Polygon
SetTextAlign
CreateHalftonePalette
GetTextCharsetInfo
ExtCreatePen
CreateRectRgn
GetTextExtentPointA
SetPixel
CreateDIBitmap
SelectPalette
SetTextJustification
GetStockObject
GetObjectType
IntersectClipRect
SetViewportOrgEx
GetWindowOrgEx
CreateEllipticRgn
GetNearestColor
SetTextColor
GetWindowExtEx
EnumFontsA
StartDocA
LineTo
GetViewportOrgEx
CloseMetaFile
Polyline
BitBlt
ExtSelectClipRgn
GetCurrentObject
MoveToEx
CreateDCA
SelectObject
SetBkMode
RealizePalette
Rectangle
EnumMetaFile
OffsetWindowOrgEx
GetROP2
CreatePalette
GetViewportExtEx
CreateCompatibleBitmap
RestoreDC
FillRgn
CreatePolygonRgn
PtVisible
PatBlt
EnumFontFamiliesA
ScaleViewportExtEx
GetDeviceCaps
CreateMetaFileA
StretchBlt
GetStretchBltMode
GetNearestPaletteIndex
SetBkColor
GetRgnBox
ArcTo
CreatePatternBrush
TextOutA
SetDIBits
EnumFontFamiliesExA
CreatePen
AbortDoc
SaveDC
StartPage
ExcludeClipRect
SetPixelV
GetMapMode
CreateDIBSection
SetTextCharacterExtra
GetTextMetricsA
SetRectRgn
ExtFloodFill
SetMapperFlags
SetWindowOrgEx
GetSystemPaletteEntries
SetAbortProc
GetCurrentPositionEx
RectInRegion
GetClipBox
PtInRegion
OffsetClipRgn
PolyDraw
GetBkColor
SetPolyFillMode
EndPage
CreateSolidBrush
CreateBitmap
RectVisible
GetTextExtentPoint32W
Ellipse
SetWorldTransform
OffsetRgn
DeleteObject
SetWindowExtEx
SetROP2
OffsetViewportOrgEx
CopyMetaFileA
SetMapMode
PlayMetaFile
comdlg32
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
advapi32
IsTextUnicode
RegSetValueA
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
GetFileSecurityA
RegSetValueExA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
SetFileSecurityA
RegQueryInfoKeyA
RegQueryValueA
RegCreateKeyExA
GetUserNameA
shell32
DragFinish
SHGetMalloc
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
ExtractIconExA
ShellExecuteExA
SHBrowseForFolderA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHFileOperationA
SHGetFileInfoA
DragQueryFileA
ole32
OleLoad
WriteClassStg
StgCreateDocfile
OleIsCurrentClipboard
OleDestroyMenuDescriptor
CoTaskMemAlloc
OleRegGetUserType
CreateItemMoniker
WriteClassStm
OleDuplicateData
CoTaskMemRealloc
CoLockObjectExternal
OleQueryLinkFromData
StgCreateDocfileOnILockBytes
OleCreateFromFile
CoInitialize
OleCreateFromData
WriteFmtUserTypeStg
CoTreatAsClass
OleSaveToStream
RevokeDragDrop
OleCreateMenuDescriptor
OleRegEnumVerbs
CLSIDFromProgID
OleRun
CLSIDFromString
CoRegisterMessageFilter
SetConvertStg
OleCreateLinkFromData
OleGetClipboard
CoRegisterClassObject
OleSetContainedObject
DoDragDrop
CreateBindCtx
StringFromCLSID
CreateOleAdviseHolder
RegisterDragDrop
OleLockRunning
ReleaseStgMedium
ReadClassStg
OleSetMenuDescriptor
CoCreateInstance
CoRevokeClassObject
GetHGlobalFromILockBytes
OleFlushClipboard
CoGetClassObject
OleInitialize
GetRunningObjectTable
OleCreateStaticFromData
StringFromGUID2
OleSetClipboard
CreateDataAdviseHolder
OleRegGetMiscStatus
CoDisconnectObject
CreateStreamOnHGlobal
CoInitializeEx
OleGetIconOfClass
OleIsRunning
StgIsStorageFile
CreateGenericComposite
StgOpenStorageOnILockBytes
CreateFileMoniker
OleCreateLinkToFile
OleUninitialize
OleTranslateAccelerator
OleQueryCreateFromData
IsAccelerator
CoUninitialize
CreateILockBytesOnHGlobal
ReadFmtUserTypeStg
CoGetMalloc
StgOpenStorage
CoTaskMemFree
OleCreate
OleSave
CoFreeUnusedLibraries
oleaut32
SafeArrayAllocDescriptor
SysFreeString
OACreateTypeLib2
VarCyFromStr
SafeArrayGetLBound
SetErrorInfo
VariantChangeType
SafeArrayRedim
SafeArrayGetUBound
SafeArrayCreateVector
SysAllocStringLen
SafeArrayAccessData
LoadTypeLi
OleCreateFontIndirect
SysStringByteLen
VariantInit
VariantCopy
VarBstrCat
SafeArrayGetDim
VarBstrFromCy
SafeArrayCreate
SafeArrayPtrOfIndex
VariantClear
SafeArrayGetElemsize
VarBstrFromDate
RegisterTypeLi
SysReAllocStringLen
SystemTimeToVariantTime
SafeArrayCopy
SafeArrayUnaccessData
SysStringLen
SafeArrayDestroyDescriptor
VarBstrCmp
CreateErrorInfo
SysAllocString
SafeArrayLock
SafeArrayUnlock
SafeArrayAllocData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
SysAllocStringByteLen
VariantTimeToSystemTime
VarDecFromStr
VarBstrFromDec
LoadRegTypeLi
VarUdateFromDate
VarDateFromStr
GetErrorInfo
VarUI4FromStr
comctl32
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_GetIcon
ord17
ImageList_Remove
ImageList_Duplicate
ImageList_AddMasked
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_Destroy
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Create
ImageList_ReplaceIcon
shlwapi
PathStripToRootA
PathFileExistsA
SHDeleteKeyA
PathRelativePathToA
PathRemoveExtensionA
PathIsUNCA
PathGetArgsA
UrlUnescapeA
PathCanonicalizeA
PathFindExtensionA
PathRemoveFileSpecW
PathFindFileNameA
PathUnquoteSpacesA
PathRemoveArgsA
winmm
PlaySoundA
rpcrt4
RpcStringFreeA
UuidCreate
UuidToStringA
msimg32
AlphaBlend
TransparentBlt
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
wininet
GopherFindFirstFileA
InternetFindNextFileA
InternetOpenUrlA
FtpRemoveDirectoryA
HttpAddRequestHeadersA
InternetGetCookieA
FtpCreateDirectoryA
InternetSetFilePointer
DeleteUrlCacheEntry
InternetQueryDataAvailable
FtpPutFileA
FtpFindFirstFileA
InternetWriteFile
InternetCloseHandle
InternetOpenA
InternetGetLastResponseInfoA
FindFirstUrlCacheEntryA
InternetCanonicalizeUrlA
InternetCrackUrlA
FindCloseUrlCache
InternetCheckConnectionA
InternetSetCookieA
InternetQueryOptionA
FtpDeleteFileA
FindNextUrlCacheEntryA
HttpOpenRequestA
GopherOpenFileA
InternetSetOptionA
HttpQueryInfoA
InternetErrorDlg
FtpOpenFileA
InternetSetStatusCallback
HttpEndRequestA
FtpSetCurrentDirectoryA
InternetReadFile
FtpCommandA
FtpRenameFileA
FtpGetCurrentDirectoryA
FtpGetFileA
HttpSendRequestA
InternetAttemptConnect
InternetGetConnectedState
InternetSetOptionExA
GopherCreateLocatorA
InternetConnectA
HttpSendRequestExA
GopherGetAttributeA
wsock32
ioctlsocket
gethostname
listen
WSACleanup
getpeername
connect
WSASetLastError
htonl
getsockname
WSAAsyncSelect
gethostbyname
select
WSAGetLastError
WSAStartup
inet_addr
closesocket
recvfrom
send
accept
socket
sendto
MigrateWinsockConfiguration
bind
ntohs
htons
recv
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
ws2_32
WSASocketA
oledlg
ord8
gdiplus
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipGetImageEncodersSize
GdipDeleteGraphics
GdipReleaseDC
GdipGetImageHeight
GdipGetImageEncoders
GdiplusStartup
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCloneImage
GdipGetImagePalette
GdipFree
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipDrawImageI
GdipBitmapUnlockBits
GdipCreateBitmapFromFileICM
GdipAlloc
GdipGetImageWidth
GdiplusShutdown
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromStreamICM
GdipGetDC
urlmon
CoInternetGetSession
UrlMkSetSessionOption
RegisterBindStatusCallback
URLDownloadToFileA
psapi
GetProcessMemoryInfo
msvfw32
MCIWndCreateA
rasapi32
RasHangUpA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wert Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zert Size: 690KB - Virtual size: 689KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xyu Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ