PE: add mandiant importhash