An IDA Pro plugin to make creating code signatures quick and simple. This is a port of the popular (compiled) version of SigMaker-X64 with a new pyQt5 GUI that can be left open as a floating window or docked. The primary goal was to make a plugin that would work with many versions of IDA without needing to compile against the IDA SDK. Since the IDAPython API is now uniform in structure it seemed like a good time to tackle this project.
Ported by: zoomgod
Credits to the author/contributors of SigMaker-x64 for the core sig generating code.
** Python 3.8 Recommended **
2026-01-23: Added support for IDA 9, tested on 9.1
2026-01-24: Changed bin_search flags for IDA 9
2026-06-11: Mostly internal changes to GUI: Tested on 7.5 and 9.1
1) Fixed bug where sometimes output did not show.
2) Optional AutoDock to the right of Output window
3) Fixed geometry restore issue
4) Clear settings button (requires restart)
5) Dbg tab to dump various levels of the IDA Qt widget tree
to log file. Auto opens log with associated program.
6) Included a requirements.txt file for use with pip if Qt modules are needed.
copy pySigMaker.py into IDA plugin folder.
**Note** Default is to use same hotkey as SigMaker-x64 (Ctrl-Alt-S) which will
cause a warning to be displayed in IDA if orig SigMaker-x64 plugin
exists. On settings tab there will be an option to archive the origional
SigMaker-X64 plugins to a folder in IDA plugins dir. Or you can
choose to change the hotkey. This plugin will get priority if both exist
and default hotkey is used.
- Ctrl + Alt + S
IDA Pro 7.0
IDA Pro 7.5, IDAPython 64-bit v7.4.0 final, Python 3.8 64 bit
IDA Pro 7.6
IDA Pro 9.1
IDA Patterns : E8 ? ? ? ? 48 8B 83 ? ? ? ? 48 8B CB
Olly Patterns: E8 ?? ?? ?? ?? 48 8B 83 ?? ?? ?? ?? 48 8B CB
Code Patterns: \xE8\x00\x00\x00\x00\x48\x8B x????xx (mask optional)
Fixed issue with rebased images (related to ida inf struct)
1. Making a sig from selection was replaced with an auto-create at current address.
2. Trailing wildcards on sigs are dropped
3. Added a new pyQt5 tabbed Gui that can be used in floating or docked modes.
4. LOG_ERROR is minimum output setting now so error messages are always output.
5. Improved history, mask automatically restored based on sig selected in drop down.
