01_PE_Time_watermark

01_PE_Time_watermark

Figure 1. PE timestamp in the dropper of Win32/Exaramel backdoor