Signed Malware ?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

https://valkyrie.comodo.com/Result.html?sha1=88536ac5f0b0f57114775bd5913b1075d276e565&&query=1&&filename=zugo—example—startnow.exe

Screenshot:

952×666 96.3 KB

Source:
http://www.rokop-security.de/index.php?s=&showtopic=11768&view=findpost&p=342623

submitted

2

Nothing new… 88)
It is signed by “Zugo Ltd” which is not part of TVL.
Therefore you will get a pop-up asking you to Sandbox/Allow/Block.

3

and Comodo

952×666 96.3 KB

4

It could be stolen?
BTW, you will get a pop-up anyway…
CIS checks for digital signature signer, not issuer.