TrendLabs: TA505 At It Again: Variety is the Spice of ServHelper and FlawedAmmyy

Figure 3. .LNK shortcut in .ISO file

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/ta505-at-it-again-variety-is-the-spice-of-servhelper-and-flawedammyy/