Fixed list handling in to_obj() and to_dict() of MalwareSubject