Does the assembly or exe sign a digital certificate, does it protect against fakes?

Question

I tried to create a temporary certificate using makecert and create spc from the certificate using cert2spc. I signed some exe with generated spc. Then I use the binary editor in VS 2008 to flip some bits (fake it) in exe. To my surprise, I was able to run the application.

I expected the system to detect tampering and complain. Hence the question.

Any guidance would be appreciated.

Answer 1

No, because any code in the binary to verify the signature can also be changed.

IDA Pro . , , . , , . , - , ps3 xbox360 , .