The flag is hidden using an algorithm, for JPEG steganography, called JSteg. Using any available implementation of the algorithm for extracting the flag will give another file and post that the question will become one of simple audio steganography. 