VirusTotal API key should be lowercase

...otherwise API_KEY gets always used.