when analyzing packed malware, what is the first step? a$)$ perform dynamic analysis, b$)$ use a disassembler to analyze it directly c$)$ examine it encryption methods, d$)$ unpack the executable using a tool like UPX