headers in malware analysis