Program Similarity Analysis for Malware Classification and its Pitfalls