FEDA Challenge 2

Menganalisis floppy pulih dari komputer pemasok narkoba

MD5 (scan26) = e9c7d0c87ab0ecce09bf90362b830a74
MD5 (scan26.zip) = c8e2454b970538de26a0fa887017109b

Questions

You can find all judging criteria at the SotM main Page.

1. Who is the probable supplier of drugs to Jimmy Jungle?
2. What is the mailing address of Jimmy Jungle's probable drug supplier?
3. What is the exact location in which Jimmy Jungle received the drugs?
4. Where is Jimmy Jungle currently hiding?
5. What kind of car is Jimmy Jungle driving?
6. Bonus Question: Explain the process that was performed so that there were no entries in the root directory and File Allocation Table (FAT), yet the contents of each file remained in the data area?

Answer:

(using foremost, and  strings)

Who is the probable supplier of drugs to Jimmy Jungle?

According to John.doc (which was hidden in the JPEG file stored in the floppy disk image at and also password protected. The string "pw=help" found in the unallocated disk space of the floppy unlocked the file), John Smith is Jimmy Jungle's most probable supplier of drugs.

What is the mailing address of Jimmy Jungle's probable drug supplier?

1212 Main Street
Jones, FL 00001

What is the exact location in which Jimmy Jungle received the drugs?

Where is Jimmy Jungle currently hiding?

 What kind of car is Jimmy Jungle driving?

 Found Jimmy.wav
"This is Jimmy, meet me at the pier tomorrow. I drive a blue 1978 Mustang with Ontario license plates".