The way I understand it is a signature is included in the binaries and when run the software will hash the binaries and the result is compared to the signature. If the two don't match the software has been tempered and the software won't run. If it is that easy to remove the signature then what is the point of signing a software? It will be like your first floor home has a steel door but the window is wide open.