Smoke and (screen) mirrors: A strange signed backdoor

Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely