Once you click Run, the debugged process will break directly on the OEP, which will cause an access violation error to appear, as you can see in the following screenshot:
Figure 9: Staying at the OEP of the sample in OllyDbg
This is not always the case, as some packers modify the first few bytes of the first section with instructions such as ret, jmp, call, just to make the debugged process break on this breakpoint; however, after a few iterations, the program will break. This occurs after full decryption/decompression of the first section, which it does in order to execute the original code of the program.
