Slip a trojan into a file, then send and bam, you got yourself a victim. =D
IStealer works best. Crypt the stealer into the program file and have them launch. Make sure you set the crypter to melt the application so they can't recover anything from it.