yara regex scan, match some invisible characters

[gaohang]

[ PROBLEM ] yara scan a binary executable file, rule as below: rule lua_23 { meta: componentId = "23" componentName = "lua"

strings:
    $re_b = /\blua\b/

condition:
    1 of them

} however, there are many invisible chars in match result, like 0x3e0f3e9:$re_f: j\x02\xBEluaL\xD1\x01\xE4 0x3e0f3eb:$re_f: \xBEluaL\xD1\x01\xE4 ......

these match results are not in strings of binary file.

[ PROBLEM ] Is the any way to make yara scan only the string section of a binary file other than whole file?

[plusvic]

Can you provide both the whole YARA rule and the file that matches? In your report the matches are like:

0x3e0f3e9:$re_f: j\x02\xBEluaL\xD1\x01\xE4

But there's not string named $re_f in the shown rule shown in the report.