elastic / labs-releases - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 323 units with 2,826 lines of code in units (65.2% of code).

0 very complex units (0 lines of code)
0 complex units (0 lines of code)
2 medium complex units (116 lines of code)
25 simple units (519 lines of code)
296 very simple units (2,191 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
def check() in tools/stix-to-ecs/stix_to_ecs.py	16	14	1
def hello() in tools/warmcookie/warmcookie_http.py	100	11	0
def explore_ctree() in tools/ida_scripts/hexrays_examples/ctree_traversal.py	20	10	1
def get_options() in tools/stix-to-ecs/stix_to_ecs.py	50	10	0
def decompress_data() in nightMARE/src/nightmare/analysis/compression/lznt1.py	40	9	1
def __get_data_refs() in nightMARE/src/nightmare/malware/xorddos/core.py	13	8	1
def set_decompiler_comment() in tools/latrodectus/latro_str_decrypt.py	33	8	2
def get_addresses_from_tinytracer() in tools/guloader/guloader_FixCFG.py	19	8	1
def cleaning_callback() in tools/stix-to-ecs/extra/clean_stix.py	10	8	1
def crypt() in nightMARE/src/nightmare/malware/blister/crypto.py	23	7	2
def __decrypt_configuration() in nightMARE/src/nightmare/malware/netwire/configuration.py	22	7	2
def main() in extractors/redlinestealer/redlinestealer_config_extractor.py	17	7	0
def description() in tools/stix-to-ecs/stix_to_ecs.py	14	7	1
def __generate_encrypted_string_candidates() in nightMARE/src/nightmare/malware/lobshot/configuration.py	8	6	1
def __extract_idat_blob() in nightMARE/src/nightmare/malware/ghostpulse/payload.py	30	6	2
def __load_imports() in nightMARE/src/nightmare/malware/icedid/custom_pe.py	22	6	3
def extract() in nightMARE/src/nightmare/malware/stealc/configuration.py	18	6	1
def decrypt_string() in nightMARE/src/nightmare/malware/stealc/crypto.py	19	6	2
def read_encrypted_configuration() in nightMARE/src/nightmare/malware/remcos/configuration.py	9	6	1
def main() in extractors/lobshot/lobshot_config_extractor.py	18	6	0
def get_encrypted_string() in tools/latrodectus/latro_str_decrypt.py	18	6	1
def main() in tools/stix-to-ecs/stix_to_ecs.py	13	6	0
def find_cutom_pipeline_processor() in tools/malware_research/custom_pipelines.py	11	6	2
def main() in tools/ghostpulse/ghostpulse_payload_extractor.py	25	6	0
def calculate_checksum() in tools/warmcookie/warmcookie_http.py	14	6	2
def main() in tools/warmcookie/warmcookie_str_decrypt.py	20	6	0
uint32_t main() in tools/abyssworker/client/main.c	33	6	2
def __injection_method() in nightMARE/src/nightmare/malware/blister/configuration.py	11	5	1
def __parse_configuration_aux() in nightMARE/src/nightmare/malware/xorddos/configuration.py	10	5	1
def decrypt_string() in nightMARE/src/nightmare/malware/lobshot/crypto.py	20	5	1
def __pixels_extraction_implementation() in nightMARE/src/nightmare/malware/ghostpulse/payload.py	21	5	1
def unpack_configuration() in nightMARE/src/nightmare/malware/remcos/configuration.py	10	5	1
def get_string_decrypt_funcs() in tools/latrodectus/latro_str_decrypt.py	12	5	1
def visit_expr() in tools/ida_scripts/hexrays_examples/ctree_practical_example.py	18	5	2
def __init__() in tools/stix-to-ecs/stix_to_ecs.py	17	5	2
def get_browser_hook_payloads() in tools/icedid/gzip-variant/extract_payloads_from_core.py	19	5	2
def set_iv() in nightMARE/src/nightmare/malware/blister/crypto.py	14	4	2
def next_state() in nightMARE/src/nightmare/malware/blister/crypto.py	19	4	2
def __get_all_posible_datarefs() in nightMARE/src/nightmare/malware/xorddos/configuration.py	8	4	1
def extract() in nightMARE/src/nightmare/malware/smokeloader/configuration.py	17	4	1
def extract() in nightMARE/src/nightmare/malware/netwire/configuration.py	24	4	1
def __apply_relocations_aux() in nightMARE/src/nightmare/malware/icedid/custom_pe.py	37	4	2
def find_uris() in nightMARE/src/nightmare/malware/stealc/configuration.py	12	4	1
def unpack_c2() in nightMARE/src/nightmare/malware/remcos/configuration.py	8	4	1
def get_section_content() in nightMARE/src/nightmare/utils.py	8	4	2
def resolve_key_chain() in nightMARE/src/nightmare/utils.py	11	4	3
def __find_free_memory() in nightMARE/src/nightmare/analysis/emulation.py	7	4	2
def __init_iat() in nightMARE/src/nightmare/analysis/emulation.py	11	4	2
def get_rdata_section_content() in extractors/lobshot/lobshot_config_extractor.py	9	4	1
def __set_file_data() in tools/stix-to-ecs/stix_to_ecs.py	13	4	1