diff --git a/scripts/build-in-container.sh b/scripts/build-in-container.sh
index 36b0f75..39f98e4 100755
--- a/scripts/build-in-container.sh
+++ b/scripts/build-in-container.sh
@@ -25,10 +25,6 @@ objcopy --only-keep-debug runtime runtime.debug
 
 strip --strip-debug --strip-unneeded runtime
 
-# "classic" magic bytes which cannot be embedded with compiler magic, always do AFTER strip
-# TODO: should be part of the Makefile
-echo -ne 'AI\x02' | dd of=runtime bs=1 count=3 seek=8 conv=notrunc
-
 ls -lh runtime runtime.debug
 
 # append architecture prefix
@@ -54,6 +50,11 @@ mv runtime.debug runtime-"$architecture".debug
 
 objcopy --add-gnu-debuglink runtime-"$architecture".debug runtime-"$architecture"
 
+# "classic" magic bytes which cannot be embedded with compiler magic, always do AFTER strip
+# needs to be done after calls to objcopy, strip etc.
+# TODO: all these calls should be part of the Makefile
+echo -ne 'AI\x02' | dd of=runtime-"$architecture" bs=1 count=3 seek=8 conv=notrunc
+
 cp runtime-"$architecture" "$out_dir"/
 cp runtime-"$architecture".debug "$out_dir"/