Tighten up the dropper signature to eliminate matching on simple re-execution of the initial binary