01_PE_Time

01_PE_Time

Figure 1. PE timestamp in the dropper of Exaramel backdoor.