blog.reversinglabs.com
Breaking the Microsoft Authenticode security model
Authenticode is a Microsoft code signing technology software publishers use to guarantee the origin and integrity of their applications. The vast majority of modern software applications are actively using it and depend on its integrity validation system.
ReversingLabs