elastic / malware-exquacker-modules - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 55 units with 620 lines of code in units (50.6% of code).

0 very complex units (0 lines of code)
0 complex units (0 lines of code)
3 medium complex units (191 lines of code)
4 simple units (119 lines of code)
48 very simple units (310 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
def get_rule_metadata() in utils/__init__.py	38	17	1
def cobalt_strike() in cobalt_strike/cobalt_strike.py	125	16	3
def dridex_loader_final() in dridex/loader/dridex_loader.py	28	11	2
def ref_c2() in hancitor/hancitor.py	29	7	2
def PHOREAL_RC4_key() in phoreal/phoreal.py	36	7	3
def parse_config() in icedid/peloader/icedid_peloader.py	21	6	2
def asyncrat_magic() in asyncrat/asyncrat.py	33	6	3
def decrypt_conf() in zloader/zloader.py	22	5	3
def parse_config() in hancitor/hancitor.py	12	5	2
def find_encrypted_config() in icedid/peloader/icedid_peloader.py	12	5	2
def icedid_photoloader() in icedid/photoloader/icedid_photoloader.py	18	4	3
def ref_c2() in icedid/peloader/icedid_peloader.py	15	4	2
def icedid_config() in icedid/icedid.py	24	4	3
def ref_c2() in azorult/azorult.py	9	3	3
def estimate_shannon_entropy() in hancitor/hancitor.py	10	3	1
def extractPayload() in icedid/photoloader/icedid_photoloader.py	7	3	1
def strip_non_ascii() in icedid/peloader/icedid_peloader.py	6	3	1
def internal_decrypt() in icedid/peloader/icedid_peloader.py	12	3	4
def decrypt_config_item() in asyncrat/asyncrat.py	8	3	4
def match_exists() in dridex/loader/dridex_loader.py	5	3	2
def entropy() in icedid/peloader/icedid_peloader.py	8	2	1
def decrypt_config_item_list() in asyncrat/asyncrat.py	10	2	4
def c2parse_5() in dridex/loader/dridex_loader.py	6	2	3
def get_botnet_id() in dridex/loader/dridex_loader.py	4	2	3
def get_rc4_rva() in dridex/loader/dridex_loader.py	5	2	3
def ip_count_1() in dridex/loader/dridex_loader.py	4	2	3
def ip_count_2() in dridex/loader/dridex_loader.py	4	2	3
def ip_count_3() in dridex/loader/dridex_loader.py	4	2	3
def zloader() in zloader/zloader.py	3	1	3
def remove_control_chars() in azorult/azorult.py	2	1	1
def azorult() in azorult/azorult.py	3	1	3
def string_from_offset() in hancitor/hancitor.py	3	1	2
def hancitor() in hancitor/hancitor.py	3	1	3
def decrypt() in icedid/peloader/icedid_peloader.py	8	1	2
def fix_key() in icedid/peloader/icedid_peloader.py	18	1	4
def icedid_peloader() in icedid/peloader/icedid_peloader.py	3	1	3
def icedid() in icedid/icedid.py	3	1	3
def citadel_found() in citadel/citadel.py	3	1	3
def citadel() in citadel/citadel.py	3	1	3
def cit_salt() in citadel/citadel.py	4	1	3
def get_salt() in asyncrat/asyncrat.py	2	1	0
def decrypt() in asyncrat/asyncrat.py	5	1	3
def get_string() in asyncrat/asyncrat.py	2	1	2
def get_wide_string() in asyncrat/asyncrat.py	3	1	2
def decrypt_config_item_printable() in asyncrat/asyncrat.py	8	1	4
def asyncrat() in asyncrat/asyncrat.py	3	1	3
def phoreal() in phoreal/phoreal.py	3	1	3
def c2parse_6() in dridex/loader/dridex_loader.py	4	1	3
def c2parse_4() in dridex/loader/dridex_loader.py	3	1	3
def c2parse_3() in dridex/loader/dridex_loader.py	3	1	3