A new code-signing certificate generally trades for a few hundred dollars. New codesigning certificates can be purchased for $1,600 up to $7,000 for certificates with the best SmartScreen reputation. A new certificate obtained a new certificate every two days, on average, and collected $16,150 in revenue for selling these certificates. The researchers conducted an in-depth analysis of this underground trade, considering vendors, malware developers, certificate issuers, certificate issuer and certificate publishers.”]
Source: https://securityaffairs.co/wordpress/70170/digital-id/code-signing-certificates-trade.html