Deconstructing PowerShell Obfuscation in Malspam Campaigns