Adversarial Training for Raw-Binary Malware Classifiers