It's creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock scruitney.It can also use valid code signing certificates to sign files. It can use a fully qualified domain name such as www.microsoft.com www.google.com.
................................''..'...............................
..............................'.....................................
............................'.....''.',',,,,'.......................
...........................';'.....''..........'','.................
........................'.'c:'''..','''...........',................
....................'..''oKMM0ol'...'..........'....'...............
........................kNMMMMMMN0kxc'................''''..........
..................,...'xNXKMMMMMMWNNWMWKKOxocl;....'''.,.'..........
.......................KMXxWNMMWWNXNNWWMMMMNoONk:......;.''.........
..............''''.'.'oWMMNNKWWWWNWMMMMMMWWNNWKkX0'....,..'.........
..............'''....kdXWXMOWMMMMMNNXXNNNWWWWKdd0KO........'........
............','.....'N0oNxMkOXMMMWXKNXXWWMWNO'o0MWNc'.'.....''......
...........'',...''.,WMk'::..;xkKxXMMNWXX0WNMWKMMXd.;,..''...''.....
............,..','..,Nx'.........OMMkcc;c:...,xkWK..;,...,''........
.............'''''..,W0d....'....KMMl..........xWK..:.....'.........
............';;;,,'';MKO'......:kNMWNd........,OXK'';...............
............',;,'','cWXOxd,,.,dXWMMWMOKx;,ckkkkKWK':'....'..........
.............';,,..,;N00NNoMcNNXWMMMM0KKMX00KKWON0;,.'..............
.............;'.'.,..0ckKNXMdN0WNNWNNW0MMMWNMXOWXO,,,...............
............''.''.;..kc,xXXKKMMWWWNWXNWNXKWWXNokNk'....''...........
...................'.dk,;xOWMMMWWMMMMMMMMKkdd0:dX;.......'..........
...................'.;Wokclodl:;,;;,:oOOxdl;;:dXo.....'.''..........
......................,O0NlckKOxlcloxkd;;;lkOk0o...'..,.............
.......................'dXWdXKNNKKNNNXXXoONXKd'....'.'..............
.......................:.;0NOWWNNXXNNWXWk0d:..,.....................
......................;:...;xKWMMMMMM0xc......c.....................
.................'.''.,oc'...,dO0OOkc'......,c;.....................
................,..'...'odl.............'cod:.......................
..................'......;lo,..........cdc:'........'...............
......''',,'......;.........;c.......:c,............'..;............
........'.........:...........''...',..................'............
.......'........;.;.................................................
...........'......'..............................................''.
....'.............'................................'............,'..
....,........;:',.;..............'..''.......'.....,............;..,
....;......','.,'.;.........,...:..,,......''......;.'.........,....
....:..:..,..''...,.........,...o.;:......;,.........,.........,.'..
....;..,..'.'......,........'''cc'o.......;.....,;''''.........'.',.
....'..............'.......,.':.,c.......,........'.............,...
...........................c..,.l,..............................,...
.......,..................:..c'.:,..................................
..........................,.;....'..................................
[*] Use:~ go run sign3r.go -h
[+] Made By:~ Ghosthub
[+] Example:~ go run sign3r.go -I payload.exe -O SignPayload.exe -Domain www.microsoft.com