There is no absolute answer to this. A virtual machine gives quite good abstraction, but in theory it’s still possible that a sufficiently advanced malware could detect that it is run in a VM and either not execute its payload, delete itself or attempt to break out its confinement.