Yes, uploaded files are scanned for malware (the module and its image). Once you see the green box (for module and image) with the checkmark, it is ok to proceed to the next step after upload, which is assigning a module to a campaign.