TLDR InfoSec · STRATEGIES & TACTICS
TANGLECRYPT: A SOPHISTICATED BUT BUGGY MALWARE PACKER
Summary from the TLDR InfoSec newsletter
TangleCrypt is a previously undocumented Windows malware packer that features complex features such as the ability to execute in its own process or a child process based on a user-supplied string. The packer employs several common anti-analysis techniques such as anti-debugging, string encryption, dynamic import resolving, and unoptimized code. There are several bugs in the packer, which suggests that it may still be a work in progress.