Describir: Legacy Code, Live Risk: Empirical Evidence of Malware Detection Gaps