Recovering an encrypted file

[nn55]

Both truecrypt and veracrypt as far as I know do not really have a header (meta information), LUKS, for instance, instead has a header with all this information.

Yeah, that's correct. The header itself is encrypted making it (nigh) impossible to distinguish the file from random data without the filesystem metadata or using black magic.

and here is an explanation on how to extract the data: https://hashcat.net/wiki/doku.php?id=fre...pt_volumes

I was sure the first thing I checked was the FAQ, but I guess I didn't do it well enough. Thanks for the tips, will check that out!