lets not forget that this isn't actually all that practical in practice. It's not executing any old binary: the 'shellcode' has to be position-independent and

lets not forget that this isn't actually all that practical in practice. It's not executing any old binary: the 'shellcode' has to be position-independent and can't rely on any normal PE features; it has to do all it's library loading on it's own etc. yes, very possible to create. but if your malware/tool you want to run is large, it will take a fair amount of time to convert.