Does Suricata disassembly a virus over a network?

[Diego]

Does Suricata perform the disassembly of a virus detected over a network? If yes, does it use this disassembly for the matching?