Can digitally signed files be malware?