Even if antivirus doesn’t initially flag it, repacked executables can have delayed payloads.