No, AV has capabilities much more sophisticated then that, however from what I understand, within the malware analysis community specific samples are generally

No, AV has capabilities much more sophisticated then that, however from what I understand, within the malware analysis community specific samples are generally identified with their hash. In addition, if the hash of a file is known-bad, you can skip all the binary pattern matching and heuristics and stuff.