I am not sure what you mean by "signature", but I see two possibilities:
- The signature is a file stored elsewhere on the hard drive. Perhaps an entry in a certificate store.
- The signature is something that is stored in the ADS (alternate data stream) of the file.