SignatureClone is a Python tool for cloning digital signatures (certificates) from one Windows PE executable to another. Built specifically for cybersecurity researchers, malware analysts, and developers working in controlled testing environments.
⚠️ This project is strictly for educational and testing purposes. Misuse is prohibited.
- 🧬 Clone digital certificates from one
.exefile to another - 📁 Export certificates as
.cerfiles - 🛡️ Preserve file structure and validate PE integrity
- 🔍 Debug-friendly logs and progress output
- 🖱️ Includes guide for manually trusting certificates in Windows
- Python 3.8 or newer
pip install -r requirements.txtPackages:
pefilecryptography
Clone the repo and install dependencies:
git clone https://github.com/rabbanyhmm/SignatureClone.git
cd SignatureClone
pip install -r requirements.txtRun the script with three arguments:
python CertificateCloner.py <SourceFile.exe> <TargetFile.exe> <OutputFile.exe>python CertificateCloner.py ClipUp.exe myapp.exe SignedApp.exe- Validates PE structure
- Extracts certificate from
SourceFile.exe - Injects into
OutputFile.exe - Outputs debug info and
cloned_certificate.cer
After successful cloning, you should see a Digital Signature tab like this:
- Right-click
OutputFile.exe→ Properties → Digital Signatures - Click the signature → Details → View Certificate → Install Certificate
- Choose Local Machine → Next
- Choose Trusted Root Certification Authorities
- Click OK → Next → Finish
❗ Windows will still show the signature as invalid unless re-signed with
signtool.exe.
Do not use in production. Use only in secure lab/test environments.
- Adding untrusted certificate