Practical COM code reconstruction with IDA PRO (Movie tutorial)

Since more and more malware are using the COM interface I thought it was time to write some reconstruction helpers and creating a video tutorial how to use it on a real life malware. You'll see how a complete function which uses the COM interface will be translated into far more readable code than before. The code itself dumps the windows protected storage to steal account data like member site passes, outlook express accounts, autocomplete fields and so forth. The IDAPython scripts are indeed also available on my site.

Practical COM Code Reconstruction at Reconstructer.org

Enjoy,
Frank Boldewin