home

5244156678.exe

Couponarific

This is the instaler for an an Adpeak program that shows ads in the browser without providing information about the ad's origin. Ads are injected as banners or text-links in random web pages. The application 5244156678.exe by Couponarific has been detected as adware by 29 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. It is also typically executed from the user's temporary directory.
Publisher:
Couponarific  (signed and verified)

MD5:
d4f5370cfc92ce4d284e4da12d069d97

SHA-1:
ce7b31fdb62516124b043f43e88c5f7e1dfbcd04

SHA-256:
2e12a00c7de8787a1da1e5b3879d82bc25bae48b046dc51e818b206a3b741457

Scanner detections:
29 / 68

Status:
Adware

Explanation:
Injects advertisements in the web browser in the form or banner ads and popups.

Analysis date:
1/12/2025 4:55:33 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Generic.1008309
6315774

Agnitum Outpost
PUA.Adpeak
7.1.1

Avira AntiVirus
APPL/Adpeak.682992
7.11.198.178

avast!
Adware-CCW [PUP]
141214-1

AVG
Generic6
2015.0.3245

Baidu Antivirus
Adware.Win32.AdPeak
4.0.3.141229

Bitdefender
Application.Generic.1008309
1.0.20.1815

Clam AntiVirus
Win.Trojan.Adpeak
0.98/19853

Comodo Security
ApplicUnwnt
20524

Dr.Web
Trojan.DownLoad3.35130
9.0.1.05190

Emsisoft Anti-Malware
Application.Generic.1008309
9.0.0.4668

ESET NOD32
Win32/Adware.Adpeak.Q application
7.0.302.0

Fortinet FortiGate
Adware/Adpeak
12/29/2014

F-Secure
Application.Generic.1008309
11.2014-29-12_2

G Data
Application.Generic.1008309
14.12.24

K7 AntiVirus
Unwanted-Program
13.188.14484

Kaspersky
not-a-virus:AdWare.Win32.AdPeak
15.0.0.543

McAfee
Trojan.Artemis!94F2DB04F90A
16.8.708.2

Microsoft Security Essentials
Threat.Undefined
1.191.1091.0

MicroWorld eScan
Application.Generic.1008309
15.0.0.1089

NANO AntiVirus
Trojan.Win32.DownLoad3.djkwer
0.30.0.64448

Norman
Application.Generic.1008309
29.12.2014 07:19:03

Panda Antivirus
Generic Suspicious
14.12.29.03

Reason Heuristics
PUP.Couponarific.K
14.12.29.15

Rising Antivirus
PE:AdWare.Win32.Adpeak.d!1075356118
23.00.65.141227

Sophos
Generic PUA OG
4.98

Trend Micro House Call
TROJ_GE.178DCE40
7.2.363

Vba32 AntiVirus
AdWare.AdPeak
3.12.26.3

VIPRE Antivirus
Threat.4150696
35418

File size:
346.1 KB (354,360 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\5244156678.exe

Digital Signature
Signed by:
Couponarific

Authority:
GlobalSign nv-sa

Valid from:
10/6/2014 1:12:43 PM

Valid to:
10/7/2015 1:12:43 PM

Subject:
E=support@couponarific.com, CN=Couponarific, O=Couponarific, L=Seattle, S=WA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D5217FDB68336D578AC0747743835652

File PE Metadata
Compilation timestamp:
10/6/2014 9:40:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:aoGzI1XMy/TvThfmNAZSDKnr/i+AWoWninC2/3zop7dtpTekgmlSaUY:abloThfuAkDKnr/HqWilvzoZVTaaUY

Entry address:
0x31FF

Entry point:
81, EC, D8, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, 34, 71, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 09, A3, 78, 92, 42, 00, E8, FD, 2E, 00, 00, A3, C4, 91, 42, 00, 55, 8D, 44, 24, 38, 68, B4, 02, 00, 00, 50, 55, 68, 70, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, C0, 92, 40, 00, 68, C0, 81, 42, 00, E8, 68, 2B, 00, 00, FF, 15, 38, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 56, 2B, 00, 00...
 
[+]

Entropy:
7.9491

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Remove 5244156678.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.