Technique 6 – memory breakpoint on execution

This technique is very straightforward. Many packers encrypt the first few sections (including the code section), and the unpacker stub just unpacks each of them and then transfers control to the original entry point (OEP) for the application to run normally. We don't know the OEP, but we can easily assume that it's in the first section and that we can set a breakpoint to catch any execution of instructions there.