[yurymik]

Yes, but once malware is on the other side, it could be caught by the AV doing static analysis/signature match. This point of this technique is obfuscation and evasion.