In reply to Nick.

As it mentions in the post, there is an initial program that is downloading the PNG file to further expand the exploitation. That initial program also extracts the data from the PNG. The PNG does not operate by itself, it is just used as a transport vehicle to hide the new executable.