First of all, Flame is a huge package of modules comprising almost 20 MB in size when fully deployed. Because of this, it is an extremely difficult piece of malware to analyze.
http://www.securelist.com/en/blog/20...ns_and_Answers
Why big size makes harder detect?