I assume you would need to know the .exe was a SFX file, open it with WinRAR, but not execute it. Lots of maybes there. I also assume this is pretty easy to exploit.