Oh nonsense, that was well established to be an edit of the binary. It’s obvious the GRU didn’t have the source code. The idea that this was an example of the GRU working with criminal hackers is plainly ridiculous.

https://blog.malwarebytes.com/threat-analysis/2017/06/eterna...

Why call it diskcoder.c anyway? It’s Petya