Empirical Quantification of Spurious Correlations in Malware Detection