VirusTotal just tests against the signatures really. You need to actually execute the sample to see if it can go past CyberCapture, DeepScreen, Cloud and the Behaviour Shield.