You're correct, they're just files. To create a new branch off of master you can just...

  cp .git/refs/heads/master .git/refs/heads/WTFFF

... no SHA-1 involved at all, no parent, history, etc.